sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000000340)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00'}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x4c}}, 0x4004010) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xdf9}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) 16:01:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x81, 0x2200) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000180)=0xcc6) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x20008000) 16:01:40 executing program 2: ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, &(0x7f0000000300)={{&(0x7f0000000280)={'GENERAL\x00', {}, {&(0x7f0000000200)={'GENERAL\x00', {&(0x7f0000000140)=@adf_hex={@normal='NumberDcInstances\x00', {0x247}, {&(0x7f0000000080)=@adf_dec={@normal='NumberDcInstances\x00', {0x3}}}}}}}}}, 0x3}) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x101000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) 16:01:40 executing program 4: socket(0x2, 0xa, 0x1) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000040)=0x3ff) (async) socket(0xf, 0x2, 0x46) (async, rerun: 32) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) 16:01:40 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x8505837a28609d91, 0x9}}, 0x20) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {&(0x7f00000002c0), 0x3, r5, 0x10, 0x1, @ib={0x1b, 0x51, 0x5, {"b79a28cee68fc80dbfd251a3e5493150"}, 0x7fffffff, 0x4, 0x5}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r2, 0x2c, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x81, 0x2200) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000180)=0xcc6) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x20008000) 16:01:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @rose}, [@default, @rose, @netrom, @remote, @default, @null, @remote, @netrom]}, &(0x7f0000000000)=0x48, 0x80000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="ba", 0x1}, {0x0}], 0x2}, 0x0) getpeername$ax25(r2, &(0x7f00000001c0)={{0x3, @bcast}, [@remote, @remote, @bcast, @bcast, @default, @netrom, @netrom, @bcast]}, &(0x7f0000000180)=0x48) socketpair(0x9, 0x800, 0x5, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r1, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbcd}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4081}, 0x20000000) 16:01:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000000340)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00'}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x4c}}, 0x4004010) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xdf9}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) 16:01:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000400)={0xf, 0x8, 0xfa00, {r1, 0x5}}, 0x10) 16:01:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x81, 0x2200) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000180)=0xcc6) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x20008000) 16:01:40 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socketpair(0x2a, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{@fixed}, {@fixed}]}) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x11c, 0x0, &(0x7f0000000580)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/208, 0xd0, 0x1, 0x37}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/4, 0x4, 0x1, 0x5}, @fda={0x66646185, 0x4, 0x2, 0x17}}, &(0x7f0000000300)={0x0, 0x28, 0x50}}}, @dead_binder_done, @acquire={0x40046305, 0x1}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x100b, 0x2}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/92, 0x5c, 0x0, 0xf}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}, 0x1000}, @dead_binder_done, @release, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f00000004c0)={@fda={0x66646185, 0xa, 0x0, 0x9}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000540)={0x0, 0x20, 0x38}}, 0x40}, @release={0x40046306, 0x1}], 0x37, 0x0, &(0x7f00000006c0)="1af2ab4263aae1db822e7bdf814984111080d6b74747571eb5309c15788f53c52d121601cbb3eec634fcf2647dac36308c34058166a9d8"}) 16:01:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000000340)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00'}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x4c}}, 0x4004010) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xdf9}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000000340)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00'}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x4c}}, 0x4004010) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xdf9}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) (async) 16:01:40 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x8505837a28609d91, 0x9}}, 0x20) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {&(0x7f00000002c0), 0x3, r5, 0x10, 0x1, @ib={0x1b, 0x51, 0x5, {"b79a28cee68fc80dbfd251a3e5493150"}, 0x7fffffff, 0x4, 0x5}}}, 0xa0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r2, 0x2c, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x8505837a28609d91, 0x9}}, 0x20) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r5}}, 0x18) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {&(0x7f00000002c0), 0x3, r5, 0x10, 0x1, @ib={0x1b, 0x51, 0x5, {"b79a28cee68fc80dbfd251a3e5493150"}, 0x7fffffff, 0x4, 0x5}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r2, 0x2c, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) (async) 16:01:40 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socketpair(0x2a, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{@fixed}, {@fixed}]}) (async) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x11c, 0x0, &(0x7f0000000580)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/208, 0xd0, 0x1, 0x37}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/4, 0x4, 0x1, 0x5}, @fda={0x66646185, 0x4, 0x2, 0x17}}, &(0x7f0000000300)={0x0, 0x28, 0x50}}}, @dead_binder_done, @acquire={0x40046305, 0x1}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x100b, 0x2}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/92, 0x5c, 0x0, 0xf}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}, 0x1000}, @dead_binder_done, @release, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f00000004c0)={@fda={0x66646185, 0xa, 0x0, 0x9}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000540)={0x0, 0x20, 0x38}}, 0x40}, @release={0x40046306, 0x1}], 0x37, 0x0, &(0x7f00000006c0)="1af2ab4263aae1db822e7bdf814984111080d6b74747571eb5309c15788f53c52d121601cbb3eec634fcf2647dac36308c34058166a9d8"}) 16:01:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @rose}, [@default, @rose, @netrom, @remote, @default, @null, @remote, @netrom]}, &(0x7f0000000000)=0x48, 0x80000) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="ba", 0x1}, {0x0}], 0x2}, 0x0) getpeername$ax25(r2, &(0x7f00000001c0)={{0x3, @bcast}, [@remote, @remote, @bcast, @bcast, @default, @netrom, @netrom, @bcast]}, &(0x7f0000000180)=0x48) (async) socketpair(0x9, 0x800, 0x5, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r1, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbcd}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4081}, 0x20000000) 16:01:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000400)={0xf, 0x8, 0xfa00, {r1, 0x5}}, 0x10) 16:01:40 executing program 3: clock_getres(0x3, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:40 executing program 3: clock_getres(0x3, &(0x7f0000000000)) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket(0x1f, 0xe, 0x7fffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001e40), 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x60, r1, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5de0}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_MRU={0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048805}, 0x20000090) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:40 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x2, r2, 0x30, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0xa0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r3}}, 0x48) 16:01:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @rose}, [@default, @rose, @netrom, @remote, @default, @null, @remote, @netrom]}, &(0x7f0000000000)=0x48, 0x80000) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="ba", 0x1}, {0x0}], 0x2}, 0x0) (async) getpeername$ax25(r2, &(0x7f00000001c0)={{0x3, @bcast}, [@remote, @remote, @bcast, @bcast, @default, @netrom, @netrom, @bcast]}, &(0x7f0000000180)=0x48) (async) socketpair(0x9, 0x800, 0x5, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r1, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbcd}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4081}, 0x20000000) 16:01:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x6cc}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008010}, 0x800) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:40 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socketpair(0x2a, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{@fixed}, {@fixed}]}) (async) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x11c, 0x0, &(0x7f0000000580)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/208, 0xd0, 0x1, 0x37}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/4, 0x4, 0x1, 0x5}, @fda={0x66646185, 0x4, 0x2, 0x17}}, &(0x7f0000000300)={0x0, 0x28, 0x50}}}, @dead_binder_done, @acquire={0x40046305, 0x1}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x100b, 0x2}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/92, 0x5c, 0x0, 0xf}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}, 0x1000}, @dead_binder_done, @release, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f00000004c0)={@fda={0x66646185, 0xa, 0x0, 0x9}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000540)={0x0, 0x20, 0x38}}, 0x40}, @release={0x40046306, 0x1}], 0x37, 0x0, &(0x7f00000006c0)="1af2ab4263aae1db822e7bdf814984111080d6b74747571eb5309c15788f53c52d121601cbb3eec634fcf2647dac36308c34058166a9d8"}) 16:01:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) socket(0x1f, 0xe, 0x7fffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001e40), 0x2, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x60, r1, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5de0}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_MRU={0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048805}, 0x20000090) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:40 executing program 3: clock_getres(0x3, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x6cc}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008010}, 0x800) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x6cc}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008010}, 0x800) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x7}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4008080) 16:01:40 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_hsr\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3f}]}, 0x40}}, 0x4040040) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000ce9786c1c7000000000000000000000000d1085b4eaec6dedc3b44454e1057d9cd807961ce87b14abee739d5b2cd1c1399a6a6d64fa953005a9514017e5cdeb60e7c9dacc2b91a96a703ad"], 0x14}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c000) socketpair(0x21, 0xa, 0x7, &(0x7f00000002c0)) r4 = syz_open_dev$audion(&(0x7f0000000400), 0x10001, 0x800) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000240)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x270d08413fc86201}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r5, 0x800, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) 16:01:40 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x2, r2, 0x30, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0xa0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r3}}, 0x48) 16:01:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket(0x1f, 0xe, 0x7fffffff) (async) socket(0x1f, 0xe, 0x7fffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001e40), 0x2, 0x0) (async) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001e40), 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x60, r1, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5de0}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_MRU={0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048805}, 0x20000090) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2000c000, &(0x7f0000000000)={0x2, 0x3, @remote}, 0x10) 16:01:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x6cc}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008010}, 0x800) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x7}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4008080) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x7}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4008080) (async) 16:01:40 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_hsr\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3f}]}, 0x40}}, 0x4040040) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000ce9786c1c7000000000000000000000000d1085b4eaec6dedc3b44454e1057d9cd807961ce87b14abee739d5b2cd1c1399a6a6d64fa953005a9514017e5cdeb60e7c9dacc2b91a96a703ad"], 0x14}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c000) socketpair(0x21, 0xa, 0x7, &(0x7f00000002c0)) r4 = syz_open_dev$audion(&(0x7f0000000400), 0x10001, 0x800) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000240)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x270d08413fc86201}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r5, 0x800, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) socket(0x2, 0xa, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_hsr\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3f}]}, 0x40}}, 0x4040040) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000ce9786c1c7000000000000000000000000d1085b4eaec6dedc3b44454e1057d9cd807961ce87b14abee739d5b2cd1c1399a6a6d64fa953005a9514017e5cdeb60e7c9dacc2b91a96a703ad"], 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c000) (async) socketpair(0x21, 0xa, 0x7, &(0x7f00000002c0)) (async) syz_open_dev$audion(&(0x7f0000000400), 0x10001, 0x800) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r4) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000240)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x270d08413fc86201}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r5, 0x800, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) (async) 16:01:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2000c000, &(0x7f0000000000)={0x2, 0x3, @remote}, 0x10) 16:01:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:40 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x2, r2, 0x30, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r3}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r3}}, 0x48) 16:01:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2000c000, &(0x7f0000000000)={0x2, 0x3, @remote}, 0x10) 16:01:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:41 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_hsr\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3f}]}, 0x40}}, 0x4040040) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000ce9786c1c7000000000000000000000000d1085b4eaec6dedc3b44454e1057d9cd807961ce87b14abee739d5b2cd1c1399a6a6d64fa953005a9514017e5cdeb60e7c9dacc2b91a96a703ad"], 0x14}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c000) socketpair(0x21, 0xa, 0x7, &(0x7f00000002c0)) r4 = syz_open_dev$audion(&(0x7f0000000400), 0x10001, 0x800) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000240)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x270d08413fc86201}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r5, 0x800, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) socket(0x2, 0xa, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_hsr\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3f}]}, 0x40}}, 0x4040040) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000ce9786c1c7000000000000000000000000d1085b4eaec6dedc3b44454e1057d9cd807961ce87b14abee739d5b2cd1c1399a6a6d64fa953005a9514017e5cdeb60e7c9dacc2b91a96a703ad"], 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c000) (async) socketpair(0x21, 0xa, 0x7, &(0x7f00000002c0)) (async) syz_open_dev$audion(&(0x7f0000000400), 0x10001, 0x800) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r4) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000240)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x270d08413fc86201}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r5, 0x800, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) (async) 16:01:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x7}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4008080) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x7}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4008080) 16:01:41 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x1}, {0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, r1}}, 0x48) 16:01:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008800}, 0x90) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x0, [0x9, 0x1]}, &(0x7f0000000000)=0x44) socketpair(0x6, 0xa, 0x4, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r6, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r6, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x810) 16:01:41 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), r4, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000fdd9df250100fefff9914e8ecf17f40100000006001c00a3"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8040) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000e7d87a00", @ANYRES16=r1, @ANYBLOB="000829bd7000ffdbdf2501000000140002006261746164765f736c6176655f3000000900030073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x2404c895}, 0x800) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r3, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x22}}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40012) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x516, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008854}, 0x20000000) 16:01:41 executing program 4: socket(0x2, 0xa, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) 16:01:41 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x1}, {0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, r1}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x1}, {0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, r1}}, 0x48) (async) 16:01:41 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:41 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), r4, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r4}}, 0x18) (async) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), r4, 0x1}}, 0x18) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) (async) 16:01:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008800}, 0x90) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x0, [0x9, 0x1]}, &(0x7f0000000000)=0x44) socketpair(0x6, 0xa, 0x4, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r6, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r6, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x810) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008800}, 0x90) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x0, [0x9, 0x1]}, &(0x7f0000000000)=0x44) (async) socketpair(0x6, 0xa, 0x4, &(0x7f0000000240)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r6, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r6, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x810) (async) 16:01:41 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000fdd9df250100fefff9914e8ecf17f40100000006001c00a3"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8040) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000fdd9df250100fefff9914e8ecf17f40100000006001c00a3"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8040) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000e7d87a00", @ANYRES16=r1, @ANYBLOB="000829bd7000ffdbdf2501000000140002006261746164765f736c6176655f3000000900030073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x2404c895}, 0x800) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r3, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x22}}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40012) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x516, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008854}, 0x20000000) 16:01:41 executing program 4: socket(0x2, 0xa, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) 16:01:41 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x1}, {0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, r1}}, 0x48) 16:01:41 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf2571000000050022000000000005002200010008000c000f00ff0100000000008d26001c00f6f04742e51c4c4d7de875f6"], 0x40}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) 16:01:41 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008800}, 0x90) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x0, [0x9, 0x1]}, &(0x7f0000000000)=0x44) socketpair(0x6, 0xa, 0x4, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r6, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r6, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r6, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x810) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r6, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x810) 16:01:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f00000001c0)='memory.pressure\x00', 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) socketpair(0x10, 0x3, 0x214, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008054}, 0x0) 16:01:41 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async, rerun: 32) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async, rerun: 32) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), r4, 0x1}}, 0x18) (async, rerun: 64) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) (rerun: 64) 16:01:41 executing program 4: socket(0x2, 0xa, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) 16:01:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000fdd9df250100fefff9914e8ecf17f40100000006001c00a3"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8040) syz_genetlink_get_family_id$smc(&(0x7f0000000180), r0) (async) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000e7d87a00", @ANYRES16=r1, @ANYBLOB="000829bd7000ffdbdf2501000000140002006261746164765f736c6176655f3000000900030073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x2404c895}, 0x800) (async) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000e7d87a00", @ANYRES16=r1, @ANYBLOB="000829bd7000ffdbdf2501000000140002006261746164765f736c6176655f3000000900030073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x2404c895}, 0x800) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r3, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x22}}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40012) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x516, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008854}, 0x20000000) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x516, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008854}, 0x20000000) 16:01:41 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf2571000000050022000000000005002200010008000c000f00ff0100000000008d26001c00f6f04742e51c4c4d7de875f6"], 0x40}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) 16:01:41 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_pressure(r1, &(0x7f00000001c0)='memory.pressure\x00', 0x2, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) socketpair(0x10, 0x3, 0x214, &(0x7f0000000240)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008054}, 0x0) 16:01:41 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) 16:01:41 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000010000004dcb03b09839019eefa3cfd87d23d79f6367ff4575697d8f7adf502ca7c7ab2deeb095294027790950aee94d8498f628a7fa70c54ddd7e74ca48fd9eff8e833adb1157e3363b3f2140f0d45c6961291d65d81f6f6a789d9b83fe447a434d1282ad4ee244e01895967748e1ffd3f77e0cfe2f"], 0x14}}, 0x20000000) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05050000", @ANYRES16=r1, @ANYBLOB="10002bbd7000fddbdf250100000006001b004e240000"], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x44000) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20014b8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="00022abd7000fb0bc6bc87eed8eb73261fe701000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x880) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x100, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) 16:01:41 executing program 4: r0 = socket(0x10, 0x800, 0xfffffffe) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 16:01:41 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:41 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf2571000000050022000000000005002200010008000c000f00ff0100000000008d26001c00f6f04742e51c4c4d7de875f6"], 0x40}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) 16:01:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f00000001c0)='memory.pressure\x00', 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) socketpair(0x10, 0x3, 0x214, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008054}, 0x0) 16:01:41 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000010000004dcb03b09839019eefa3cfd87d23d79f6367ff4575697d8f7adf502ca7c7ab2deeb095294027790950aee94d8498f628a7fa70c54ddd7e74ca48fd9eff8e833adb1157e3363b3f2140f0d45c6961291d65d81f6f6a789d9b83fe447a434d1282ad4ee244e01895967748e1ffd3f77e0cfe2f"], 0x14}}, 0x20000000) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05050000", @ANYRES16=r1, @ANYBLOB="10002bbd7000fddbdf250100000006001b004e240000"], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x44000) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05050000", @ANYRES16=r1, @ANYBLOB="10002bbd7000fddbdf250100000006001b004e240000"], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x44000) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20014b8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="00022abd7000fb0bc6bc87eed8eb73261fe701000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x880) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20014b8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="00022abd7000fb0bc6bc87eed8eb73261fe701000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x880) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x100, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) 16:01:41 executing program 1: getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) accept$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:41 executing program 4: r0 = socket(0x10, 0x800, 0xfffffffe) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 16:01:41 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) (async) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) 16:01:41 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) (async) 16:01:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x1, @multicast2}, 0x10) 16:01:41 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000010000004dcb03b09839019eefa3cfd87d23d79f6367ff4575697d8f7adf502ca7c7ab2deeb095294027790950aee94d8498f628a7fa70c54ddd7e74ca48fd9eff8e833adb1157e3363b3f2140f0d45c6961291d65d81f6f6a789d9b83fe447a434d1282ad4ee244e01895967748e1ffd3f77e0cfe2f"], 0x14}}, 0x20000000) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05050000", @ANYRES16=r1, @ANYBLOB="10002bbd7000fddbdf250100000006001b004e240000"], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x44000) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20014b8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="00022abd7000fb0bc6bc87eed8eb73261fe701000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x880) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20014b8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="00022abd7000fb0bc6bc87eed8eb73261fe701000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x880) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x100, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) 16:01:41 executing program 1: getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) accept$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) (async) accept$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x1, @multicast2}, 0x10) 16:01:41 executing program 4: r0 = socket(0x10, 0x800, 0xfffffffe) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 16:01:41 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 16:01:41 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000640)={0x5, 0x10, 0xfa00, {&(0x7f0000000440), r1, 0x1}}, 0x18) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r7}}, 0x18) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, r7}}, 0x30) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x4bd7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x56}, r3}}, 0x30) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r3, 0x13}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:41 executing program 1: getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) accept$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:41 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) 16:01:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x1, @multicast2}, 0x10) 16:01:41 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f00000001c0), 0x4) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x6, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24014) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) accept4$ax25(r1, &(0x7f0000000380)={{}, [@null, @rose, @remote, @default, @bcast, @netrom, @bcast, @rose]}, &(0x7f0000000400)=0x48, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB="00f7126e5cf190fe3175ccd9774602d68f9faa465221074d4929e32527e393", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}}, 0x0) sendto$ax25(r0, &(0x7f0000000200)="0e5f743b557ebd1a61add34387a774762e2098d87a2a45008da42b696b475e49a863bb05abd7f7385b314484fcab2772eb96222f6908d3387c35d6046167e2be802ed7a6e431f922e0afccdccac198bb6dea2fc79c78deb348b2de0633df04b8558d0174de0162d31dfe8bc60fb8fd85cc1413a9baaabb613e8a88a9dd997822749740fa7b9f8ed2b1ea3c0369fdc362bc60b92ef147bd5fec25cee8a335ce9d0d00a0777eca84152a9cdfc9e7cca454256d6dcf2a98e73f55b38e0f9071f5fc4724800b5e492bb1b31f7b157e0d02af15737576d6", 0xd5, 0x844, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x20048000) 16:01:41 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 16:01:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x168, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8000, 0xc, [0x30, 0x6, 0x35, 0x13, 0xb, 0x1b, 0xf, 0x9, 0xe, 0x2a, 0x1f, 0x27, 0x26, 0x13, 0x37, 0x1b], 0x1, 0x1, 0x1f}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x9, 0x2}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1f, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x44004) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-camellia-aesni-avx2\x00'}, 0x58) 16:01:41 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 16:01:41 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000640)={0x5, 0x10, 0xfa00, {&(0x7f0000000440), r1, 0x1}}, 0x18) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r7}}, 0x18) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000001e40), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, r7}}, 0x30) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x4bd7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x56}, r3}}, 0x30) (async) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r3, 0x13}}, 0x10) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000080)={@rand_addr=0x64010101, @multicast1, 0x0, "a09e8f2406abcb5957a9486a06bd9141d988b263ff491f59fff17943de770975", 0x5, 0x7, 0x3, 0x80000000}, 0x3c) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 16:01:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x168, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8000, 0xc, [0x30, 0x6, 0x35, 0x13, 0xb, 0x1b, 0xf, 0x9, 0xe, 0x2a, 0x1f, 0x27, 0x26, 0x13, 0x37, 0x1b], 0x1, 0x1, 0x1f}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x9, 0x2}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1f, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x44004) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x44004) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-camellia-aesni-avx2\x00'}, 0x58) 16:01:41 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f00000001c0), 0x4) (async) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) (async) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x6, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24014) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async) accept4$ax25(r1, &(0x7f0000000380)={{}, [@null, @rose, @remote, @default, @bcast, @netrom, @bcast, @rose]}, &(0x7f0000000400)=0x48, 0x800) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB="00f7126e5cf190fe3175ccd9774602d68f9faa465221074d4929e32527e393", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}}, 0x0) (async) sendto$ax25(r0, &(0x7f0000000200)="0e5f743b557ebd1a61add34387a774762e2098d87a2a45008da42b696b475e49a863bb05abd7f7385b314484fcab2772eb96222f6908d3387c35d6046167e2be802ed7a6e431f922e0afccdccac198bb6dea2fc79c78deb348b2de0633df04b8558d0174de0162d31dfe8bc60fb8fd85cc1413a9baaabb613e8a88a9dd997822749740fa7b9f8ed2b1ea3c0369fdc362bc60b92ef147bd5fec25cee8a335ce9d0d00a0777eca84152a9cdfc9e7cca454256d6dcf2a98e73f55b38e0f9071f5fc4724800b5e492bb1b31f7b157e0d02af15737576d6", 0xd5, 0x844, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x20048000) 16:01:41 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) 16:01:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) 16:01:41 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000080)={@rand_addr=0x64010101, @multicast1, 0x0, "a09e8f2406abcb5957a9486a06bd9141d988b263ff491f59fff17943de770975", 0x5, 0x7, 0x3, 0x80000000}, 0x3c) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000080)={@rand_addr=0x64010101, @multicast1, 0x0, "a09e8f2406abcb5957a9486a06bd9141d988b263ff491f59fff17943de770975", 0x5, 0x7, 0x3, 0x80000000}, 0x3c) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) (async) 16:01:41 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f00000001c0), 0x4) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) (async) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x6, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24014) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (rerun: 64) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async) accept4$ax25(r1, &(0x7f0000000380)={{}, [@null, @rose, @remote, @default, @bcast, @netrom, @bcast, @rose]}, &(0x7f0000000400)=0x48, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB="00f7126e5cf190fe3175ccd9774602d68f9faa465221074d4929e32527e393", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}}, 0x0) sendto$ax25(r0, &(0x7f0000000200)="0e5f743b557ebd1a61add34387a774762e2098d87a2a45008da42b696b475e49a863bb05abd7f7385b314484fcab2772eb96222f6908d3387c35d6046167e2be802ed7a6e431f922e0afccdccac198bb6dea2fc79c78deb348b2de0633df04b8558d0174de0162d31dfe8bc60fb8fd85cc1413a9baaabb613e8a88a9dd997822749740fa7b9f8ed2b1ea3c0369fdc362bc60b92ef147bd5fec25cee8a335ce9d0d00a0777eca84152a9cdfc9e7cca454256d6dcf2a98e73f55b38e0f9071f5fc4724800b5e492bb1b31f7b157e0d02af15737576d6", 0xd5, 0x844, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48) (async, rerun: 32) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x20048000) (rerun: 32) 16:01:41 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000640)={0x5, 0x10, 0xfa00, {&(0x7f0000000440), r1, 0x1}}, 0x18) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) (async, rerun: 32) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r7}}, 0x18) (async, rerun: 32) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000001e40), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, r7}}, 0x30) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x4bd7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x56}, r3}}, 0x30) (async, rerun: 64) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r3, 0x13}}, 0x10) (async, rerun: 64) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x168, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8000, 0xc, [0x30, 0x6, 0x35, 0x13, 0xb, 0x1b, 0xf, 0x9, 0xe, 0x2a, 0x1f, 0x27, 0x26, 0x13, 0x37, 0x1b], 0x1, 0x1, 0x1f}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x9, 0x2}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1f, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x44004) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-camellia-aesni-avx2\x00'}, 0x58) 16:01:41 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x13f, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) (async) 16:01:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async, rerun: 64) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async, rerun: 64) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000080)={@rand_addr=0x64010101, @multicast1, 0x0, "a09e8f2406abcb5957a9486a06bd9141d988b263ff491f59fff17943de770975", 0x5, 0x7, 0x3, 0x80000000}, 0x3c) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 16:01:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) (async) socket$inet_udp(0x2, 0x2, 0x0) 16:01:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xfbff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008895}, 0x4000000) r2 = socket(0x2, 0xa, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:42 executing program 0: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xfbff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008895}, 0x4000000) (async) r2 = socket(0x2, 0xa, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:42 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x8000, 0x301000) connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10) syz_init_net_socket$ax25(0x3, 0x3, 0x6) 16:01:42 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"8c5a038c144043008080f724ca2772a643e21b779c71f27d6152b317f56b1974", r1}) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x1, 0x4900) bind$ax25(r2, &(0x7f0000000140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000100)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) sendto$inet(r0, 0x0, 0x0, 0x854, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:42 executing program 0: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:42 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x8000, 0x301000) connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10) (async, rerun: 64) syz_init_net_socket$ax25(0x3, 0x3, 0x6) (rerun: 64) 16:01:42 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000200), 0x401, 0x800) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240)=0x8, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x0, 0x3, @local}, r2, 0x100}}, 0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x40, r2, 0x0, 0x0, 0x1}}, 0x20) 16:01:42 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (rerun: 32) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"8c5a038c144043008080f724ca2772a643e21b779c71f27d6152b317f56b1974", r1}) (async, rerun: 64) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x1, 0x4900) (rerun: 64) bind$ax25(r2, &(0x7f0000000140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000100)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) sendto$inet(r0, 0x0, 0x0, 0x854, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:42 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) 16:01:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xfbff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008895}, 0x4000000) r2 = socket(0x2, 0xa, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xfbff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008895}, 0x4000000) (async) socket(0x2, 0xa, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) 16:01:42 executing program 0: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:42 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x8000, 0x301000) connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10) syz_init_net_socket$ax25(0x3, 0x3, 0x6) 16:01:42 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r6}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x200, @empty, 0x1}, {0xa, 0x4e21, 0xff, @local, 0x6}, r6}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x0, r3, 0x1c, 0x1, @ib={0x1b, 0x1, 0xffffffff, {"a3a1816655f9c14baf0037163aab9b3a"}, 0x40, 0x100000000, 0x5}}}, 0xa0) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1a360cdf093a80949be5a25458b82aba20", @ANYRES16=0x0, @ANYBLOB="000429bd7000fedbdf2503fffffffffffffffb6c616e310000000000000000000000140002007767320000000000000000000900010073797a32000000000500040002000000140002006d61637674617030000000000000000014000200766972745f77696669300000000000000900010073797a3100000000050004000100000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x40090}, 0x8000044) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}], r1, 0x1, 0x1, 0x90}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r8}}, 0x18) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000680)={0xb, 0x10, 0xfa00, {&(0x7f00000005c0), r8, 0x7fffffff}}, 0x18) 16:01:42 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x8000, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x6}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}}}, 0x118) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) 16:01:42 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:42 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000200), 0x401, 0x800) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240)=0x8, 0x4) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r2}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x0, 0x3, @local}, r2, 0x100}}, 0x48) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x40, r2, 0x0, 0x0, 0x1}}, 0x20) 16:01:42 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) 16:01:42 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x8000, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x6}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}}}, 0x118) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) 16:01:42 executing program 4: r0 = socket(0x2, 0xa, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:42 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$igmp(0x2, 0x3, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"8c5a038c144043008080f724ca2772a643e21b779c71f27d6152b317f56b1974", r1}) (async) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x1, 0x4900) bind$ax25(r2, &(0x7f0000000140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000100)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) sendto$inet(r0, 0x0, 0x0, 0x854, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:42 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) 16:01:42 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x8000, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x6}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}}}, 0x118) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) 16:01:42 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r6}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x200, @empty, 0x1}, {0xa, 0x4e21, 0xff, @local, 0x6}, r6}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x0, r3, 0x1c, 0x1, @ib={0x1b, 0x1, 0xffffffff, {"a3a1816655f9c14baf0037163aab9b3a"}, 0x40, 0x100000000, 0x5}}}, 0xa0) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1a360cdf093a80949be5a25458b82aba20", @ANYRES16=0x0, @ANYBLOB="000429bd7000fedbdf2503fffffffffffffffb6c616e310000000000000000000000140002007767320000000000000000000900010073797a32000000000500040002000000140002006d61637674617030000000000000000014000200766972745f77696669300000000000000900010073797a3100000000050004000100000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x40090}, 0x8000044) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}], r1, 0x1, 0x1, 0x90}}, 0x20) (async, rerun: 64) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r8}}, 0x18) (async, rerun: 32) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000680)={0xb, 0x10, 0xfa00, {&(0x7f00000005c0), r8, 0x7fffffff}}, 0x18) (rerun: 32) 16:01:42 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket(0x2, 0xa, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) 16:01:42 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000200), 0x401, 0x800) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240)=0x8, 0x4) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r2}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x0, 0x3, @local}, r2, 0x100}}, 0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x40, r2, 0x0, 0x0, 0x1}}, 0x20) 16:01:42 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:42 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}}, {0xa, 0xfffc, 0x0, @local, 0x1}, r1}}, 0x48) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x100, @private2, 0x112c}, {0xa, 0x4e21, 0x5, @mcast1, 0x3f}, r1, 0x1ff}}, 0x48) 16:01:42 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000100)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x7f, "c05c8c", "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"}}, 0x110) r1 = socket(0x2, 0xa, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0), 0x1000, 0x28402) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4804}, 0x24004001) socket$l2tp6(0xa, 0x2, 0x73) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x4, @private2, 0x8}, @in={0x2, 0x4e21, @remote}}}, 0x118) 16:01:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1e, 0x3, 0x5, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4008004) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x1c}}, 0x8045) r4 = socket(0x5, 0x3, 0x100) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 16:01:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x5) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x8, @rand_addr=0x64010100, 0x4e21, 0x0, 'lc\x00', 0x20, 0x86, 0x27}, {@private=0xa010100, 0x4e20, 0x4, 0x0, 0x0, 0xbc}}, 0x44) 16:01:42 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) (async) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000100)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x7f, "c05c8c", "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"}}, 0x110) r1 = socket(0x2, 0xa, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0), 0x1000, 0x28402) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4804}, 0x24004001) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$l2tp6(0xa, 0x2, 0x73) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x4, @private2, 0x8}, @in={0x2, 0x4e21, @remote}}}, 0x118) 16:01:42 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) 16:01:42 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}}, {0xa, 0xfffc, 0x0, @local, 0x1}, r1}}, 0x48) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async, rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x100, @private2, 0x112c}, {0xa, 0x4e21, 0x5, @mcast1, 0x3f}, r1, 0x1ff}}, 0x48) (rerun: 32) 16:01:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x5) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x8, @rand_addr=0x64010100, 0x4e21, 0x0, 'lc\x00', 0x20, 0x86, 0x27}, {@private=0xa010100, 0x4e20, 0x4, 0x0, 0x0, 0xbc}}, 0x44) socket$inet_udp(0x2, 0x2, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x5) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x8, @rand_addr=0x64010100, 0x4e21, 0x0, 'lc\x00', 0x20, 0x86, 0x27}, {@private=0xa010100, 0x4e20, 0x4, 0x0, 0x0, 0xbc}}, 0x44) (async) [ 1445.034578] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20001 [ 1445.100661] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20001 [ 1445.109458] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20001 16:01:42 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async, rerun: 64) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r6}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x200, @empty, 0x1}, {0xa, 0x4e21, 0xff, @local, 0x6}, r6}}, 0x48) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x0, r3, 0x1c, 0x1, @ib={0x1b, 0x1, 0xffffffff, {"a3a1816655f9c14baf0037163aab9b3a"}, 0x40, 0x100000000, 0x5}}}, 0xa0) (async) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1a360cdf093a80949be5a25458b82aba20", @ANYRES16=0x0, @ANYBLOB="000429bd7000fedbdf2503fffffffffffffffb6c616e310000000000000000000000140002007767320000000000000000000900010073797a32000000000500040002000000140002006d61637674617030000000000000000014000200766972745f77696669300000000000000900010073797a3100000000050004000100000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x40090}, 0x8000044) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}], r1, 0x1, 0x1, 0x90}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r8}}, 0x18) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000680)={0xb, 0x10, 0xfa00, {&(0x7f00000005c0), r8, 0x7fffffff}}, 0x18) 16:01:42 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1e, 0x3, 0x5, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4008004) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x1c}}, 0x8045) r4 = socket(0x5, 0x3, 0x100) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x1e, 0x3, 0x5, &(0x7f0000000140)) (async) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4008004) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x1c}}, 0x8045) (async) socket(0x5, 0x3, 0x100) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) (async) 16:01:42 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000100)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x7f, "c05c8c", "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"}}, 0x110) r1 = socket(0x2, 0xa, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0), 0x1000, 0x28402) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4804}, 0x24004001) socket$l2tp6(0xa, 0x2, 0x73) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x4, @private2, 0x8}, @in={0x2, 0x4e21, @remote}}}, 0x118) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000100)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x7f, "c05c8c", "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"}}, 0x110) (async) socket(0x2, 0xa, 0x0) (async) syz_open_dev$audion(&(0x7f00000000c0), 0x1000, 0x28402) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4804}, 0x24004001) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x4, @private2, 0x8}, @in={0x2, 0x4e21, @remote}}}, 0x118) (async) 16:01:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x5) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x8, @rand_addr=0x64010100, 0x4e21, 0x0, 'lc\x00', 0x20, 0x86, 0x27}, {@private=0xa010100, 0x4e20, 0x4, 0x0, 0x0, 0xbc}}, 0x44) socket$inet_udp(0x2, 0x2, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x5) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x8, @rand_addr=0x64010100, 0x4e21, 0x0, 'lc\x00', 0x20, 0x86, 0x27}, {@private=0xa010100, 0x4e20, 0x4, 0x0, 0x0, 0xbc}}, 0x44) (async) 16:01:42 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}}, {0xa, 0xfffc, 0x0, @local, 0x1}, r1}}, 0x48) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x100, @private2, 0x112c}, {0xa, 0x4e21, 0x5, @mcast1, 0x3f}, r1, 0x1ff}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}}, {0xa, 0xfffc, 0x0, @local, 0x1}, r1}}, 0x48) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x100, @private2, 0x112c}, {0xa, 0x4e21, 0x5, @mcast1, 0x3f}, r1, 0x1ff}}, 0x48) (async) 16:01:42 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000140)={@none}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) accept$ax25(r0, &(0x7f0000000000)={{0x3, @rose}, [@rose, @bcast, @null, @remote, @bcast, @remote, @rose, @rose]}, &(0x7f0000000100)=0x48) 16:01:42 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:43 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x3, @remote}, {0xa, 0x0, 0x1, @local}, r1}}, 0x48) 16:01:43 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000140)={@none}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) accept$ax25(r0, &(0x7f0000000000)={{0x3, @rose}, [@rose, @bcast, @null, @remote, @bcast, @remote, @rose, @rose]}, &(0x7f0000000100)=0x48) socket(0x2, 0xa, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000140)={@none}) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) accept$ax25(r0, &(0x7f0000000000)={{0x3, @rose}, [@rose, @bcast, @null, @remote, @bcast, @remote, @rose, @rose]}, &(0x7f0000000100)=0x48) (async) [ 1445.246461] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20001 [ 1445.264096] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20001 16:01:43 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x5}, 0x10) 16:01:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000001c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) 16:01:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1e, 0x3, 0x5, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4008004) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x1c}}, 0x8045) r4 = socket(0x5, 0x3, 0x100) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x1e, 0x3, 0x5, &(0x7f0000000140)) (async) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4008004) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x1c}}, 0x8045) (async) socket(0x5, 0x3, 0x100) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) (async) 16:01:43 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (rerun: 64) 16:01:43 executing program 4: r0 = socket(0x2, 0xa, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async, rerun: 64) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async, rerun: 64) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000140)={@none}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) accept$ax25(r0, &(0x7f0000000000)={{0x3, @rose}, [@rose, @bcast, @null, @remote, @bcast, @remote, @rose, @rose]}, &(0x7f0000000100)=0x48) 16:01:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x5}, 0x10) 16:01:43 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x3, @remote}, {0xa, 0x0, 0x1, @local}, r1}}, 0x48) 16:01:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000001c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000001c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) 16:01:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x5}, 0x10) 16:01:43 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x800, 0x428600) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) getsockopt$ax25_int(r2, 0x101, 0x5, &(0x7f0000000340), &(0x7f0000000380)=0x4) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0x5, 0x1, 0x0, r1}, @exit, @jmp={0x5, 0x1, 0xb, 0x8, 0xb, 0xfffffffffffffffc, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x0, 0xffff}], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x59, &(0x7f0000000180)=""/89, 0x40f00, 0x4, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x2, 0x9, 0xfff}, 0x10, 0x9cf2, r1}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000300)={0x0, r3}, 0x10) socket$alg(0x26, 0x5, 0x0) 16:01:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) socketpair(0x5, 0x6, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) 16:01:43 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x3, @remote}, {0xa, 0x0, 0x1, @local}, r1}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x3, @remote}, {0xa, 0x0, 0x1, @local}, r1}}, 0x48) (async) 16:01:43 executing program 1: openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) accept4$ax25(r2, &(0x7f00000000c0)={{0x3, @default}, [@netrom, @default, @netrom, @remote, @rose, @netrom, @rose, @netrom]}, &(0x7f0000000140)=0x48, 0x80800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000080)={@empty, @remote, 0xffffffffffffffff, "b8c97038970196abca8be7e907b26ba1db3cdb30868413ea09ace0d6733f3a1f", 0x3, 0xffff, 0xc9ea, 0x4601}, 0x3c) 16:01:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000001c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) 16:01:43 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x800, 0x428600) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) getsockopt$ax25_int(r2, 0x101, 0x5, &(0x7f0000000340), &(0x7f0000000380)=0x4) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0x5, 0x1, 0x0, r1}, @exit, @jmp={0x5, 0x1, 0xb, 0x8, 0xb, 0xfffffffffffffffc, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x0, 0xffff}], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x59, &(0x7f0000000180)=""/89, 0x40f00, 0x4, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x2, 0x9, 0xfff}, 0x10, 0x9cf2, r1}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000300)={0x0, r3}, 0x10) socket$alg(0x26, 0x5, 0x0) 16:01:43 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000180), r5, 0x9}}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r7, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8856}, 0x20040811) 16:01:43 executing program 1: openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) accept4$ax25(r2, &(0x7f00000000c0)={{0x3, @default}, [@netrom, @default, @netrom, @remote, @rose, @netrom, @rose, @netrom]}, &(0x7f0000000140)=0x48, 0x80800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000080)={@empty, @remote, 0xffffffffffffffff, "b8c97038970196abca8be7e907b26ba1db3cdb30868413ea09ace0d6733f3a1f", 0x3, 0xffff, 0xc9ea, 0x4601}, 0x3c) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) accept4$ax25(r2, &(0x7f00000000c0)={{0x3, @default}, [@netrom, @default, @netrom, @remote, @rose, @netrom, @rose, @netrom]}, &(0x7f0000000140)=0x48, 0x80800) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000080)={@empty, @remote, 0xffffffffffffffff, "b8c97038970196abca8be7e907b26ba1db3cdb30868413ea09ace0d6733f3a1f", 0x3, 0xffff, 0xc9ea, 0x4601}, 0x3c) (async) 16:01:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) socketpair(0x5, 0x6, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) 16:01:43 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f00000001c0)={@local, @local, 0x1, "a81d1770bc17e0bae585929744122d62b6e11538e0ac41fed3e8db67fa6bdde1", 0xffffffff, 0x6, 0x9, 0xc0c0}, 0x3c) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:43 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x800, 0x428600) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) getsockopt$ax25_int(r2, 0x101, 0x5, &(0x7f0000000340), &(0x7f0000000380)=0x4) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0x5, 0x1, 0x0, r1}, @exit, @jmp={0x5, 0x1, 0xb, 0x8, 0xb, 0xfffffffffffffffc, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x0, 0xffff}], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x59, &(0x7f0000000180)=""/89, 0x40f00, 0x4, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x2, 0x9, 0xfff}, 0x10, 0x9cf2, r1}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000300)={0x0, r3}, 0x10) socket$alg(0x26, 0x5, 0x0) 16:01:43 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) r2 = socket(0x5, 0x5, 0x6) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), r1) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x858) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r0, 0x1, 0x1, 0x90}}, 0x20) 16:01:43 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async, rerun: 32) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) (async, rerun: 32) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r5}}, 0x18) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000180), r5, 0x9}}, 0x18) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r7, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8856}, 0x20040811) 16:01:43 executing program 1: openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) accept4$ax25(r2, &(0x7f00000000c0)={{0x3, @default}, [@netrom, @default, @netrom, @remote, @rose, @netrom, @rose, @netrom]}, &(0x7f0000000140)=0x48, 0x80800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000080)={@empty, @remote, 0xffffffffffffffff, "b8c97038970196abca8be7e907b26ba1db3cdb30868413ea09ace0d6733f3a1f", 0x3, 0xffff, 0xc9ea, 0x4601}, 0x3c) 16:01:43 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f00000001c0)={@local, @local, 0x1, "a81d1770bc17e0bae585929744122d62b6e11538e0ac41fed3e8db67fa6bdde1", 0xffffffff, 0x6, 0x9, 0xc0c0}, 0x3c) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:43 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r1, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x24000080) 16:01:43 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) socketpair(0x5, 0x6, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) 16:01:43 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async) r2 = socket(0x5, 0x5, 0x6) (async) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), r1) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x858) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r0, 0x1, 0x1, 0x90}}, 0x20) 16:01:43 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) (async, rerun: 64) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r5}}, 0x18) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000180), r5, 0x9}}, 0x18) (async, rerun: 64) r6 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r7, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8856}, 0x20040811) 16:01:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 16:01:43 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r1, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x24000080) socket(0x2, 0xa, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r1, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x24000080) (async) 16:01:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) 16:01:43 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f00000001c0)={@local, @local, 0x1, "a81d1770bc17e0bae585929744122d62b6e11538e0ac41fed3e8db67fa6bdde1", 0xffffffff, 0x6, 0x9, 0xc0c0}, 0x3c) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:43 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async, rerun: 32) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async, rerun: 32) r2 = socket(0x5, 0x5, 0x6) (async) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), r1) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x858) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r0, 0x1, 0x1, 0x90}}, 0x20) 16:01:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 16:01:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) 16:01:43 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r1, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r1, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x24000080) 16:01:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x10002, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, r2}}, 0x30) 16:01:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24048805, &(0x7f0000000000)={0x2, 0x3, @multicast1}, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r1, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x20}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8000}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4) 16:01:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) 16:01:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async) 16:01:43 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r3, 0x3148}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, r4}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r4}}, 0x48) 16:01:43 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r0, r1, 0xe}, 0x10) connect$ax25(r0, &(0x7f0000000000)={{0x3, @bcast, 0x6}, [@null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) openat$cgroup_type(r1, &(0x7f0000000180), 0x2, 0x0) r2 = socket(0x2, 0x1, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004084) 16:01:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x10002, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, r2}}, 0x30) 16:01:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24048805, &(0x7f0000000000)={0x2, 0x3, @multicast1}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r1, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x20}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8000}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4) 16:01:43 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r0, r1, 0xe}, 0x10) connect$ax25(r0, &(0x7f0000000000)={{0x3, @bcast, 0x6}, [@null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) openat$cgroup_type(r1, &(0x7f0000000180), 0x2, 0x0) (async) r2 = socket(0x2, 0x1, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004084) 16:01:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008100}, 0x20048040) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f00000002c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x81}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x881}, 0x64040810) 16:01:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41040}, 0x2400000c) 16:01:43 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r3, 0x3148}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, r4}}, 0x30) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r4}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r4}}, 0x48) 16:01:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x10002, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, r2}}, 0x30) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x2, 0x9}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x10002, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, r2}}, 0x30) (async) 16:01:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008100}, 0x20048040) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f00000002c0)) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x81}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x881}, 0x64040810) 16:01:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24048805, &(0x7f0000000000)={0x2, 0x3, @multicast1}, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r1, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x20}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8000}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4) 16:01:43 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r0, r1, 0xe}, 0x10) connect$ax25(r0, &(0x7f0000000000)={{0x3, @bcast, 0x6}, [@null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) openat$cgroup_type(r1, &(0x7f0000000180), 0x2, 0x0) r2 = socket(0x2, 0x1, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004084) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r0, r1, 0xe}, 0x10) (async) connect$ax25(r0, &(0x7f0000000000)={{0x3, @bcast, 0x6}, [@null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) (async) openat$cgroup_type(r1, &(0x7f0000000180), 0x2, 0x0) (async) socket(0x2, 0x1, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004084) (async) 16:01:43 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41040}, 0x2400000c) 16:01:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x200, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40c4}, 0x48814) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000040) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r1, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000c0}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x800, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x12) 16:01:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008100}, 0x20048040) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f00000002c0)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x81}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x881}, 0x64040810) 16:01:44 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) 16:01:44 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r3, 0x3148}}, 0x10) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) (rerun: 64) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, r4}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r4}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r4}}, 0x48) 16:01:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41040}, 0x2400000c) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41040}, 0x2400000c) (async) 16:01:44 executing program 0: getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000340)={0x3, @default, r0}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xc, &(0x7f0000000200)=0x3f, 0x4) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f00000001c0)={@bcast, @null, 0x2, 0x20}) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000240)) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r2, 0x1, 0x1, 0x90}}, 0x20) 16:01:44 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) 16:01:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x200, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40c4}, 0x48814) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000040) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r1, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000c0}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x800, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x12) 16:01:44 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:44 executing program 1: ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"0ba4426601c75727171db8ee3c285fae90de066f0058142731bf567ee0770193", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000380)={"ea3935bf23bee6e493378ca37a02ddb1252e73c909b1252fc5ed89d254034a23", r0, 0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000003c0)={"df42901f74e4f0ee733f0de1588f68434688f8b7ce67f1c13acf11c03b9b55ae", r2}) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000080)) r3 = syz_open_dev$audion(&(0x7f0000000100), 0x1, 0x632580) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f0000000340)={{&(0x7f00000002c0)={'KERNEL\x00', {&(0x7f0000000200)=@adf_hex={@normal='NumberDcInstances\x00', {0x1f}, {&(0x7f0000000140)=@adf_dec={@format={'Dc', '2', 'RingSymRx\x00'}, {0x6}}}}}}}, 0xd4}) r4 = socket(0x21, 0x2, 0xa783) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r4, 0x800443d3, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8, 0x76, 0x7}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000400)={0x4867, "b8f3db8ad563e09489855d498bf8d311ba3d7b38cba618c75c09cc9f1cb0628b"}) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r6) 16:01:44 executing program 0: getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000340)={0x3, @default, r0}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xc, &(0x7f0000000200)=0x3f, 0x4) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f00000001c0)={@bcast, @null, 0x2, 0x20}) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000240)) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r2, 0x1, 0x1, 0x90}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r2, 0x1, 0x1, 0x90}}, 0x20) 16:01:44 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x1001) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) r3 = syz_open_dev$audion(&(0x7f0000000080), 0x8, 0x181000) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x4}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:44 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:44 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) 16:01:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x200, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40c4}, 0x48814) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000040) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r1, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000c0}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x800, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x12) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000c0}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x800, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x12) 16:01:44 executing program 1: ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"0ba4426601c75727171db8ee3c285fae90de066f0058142731bf567ee0770193", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000380)={"ea3935bf23bee6e493378ca37a02ddb1252e73c909b1252fc5ed89d254034a23", r0, 0xffffffffffffffff}) (async, rerun: 64) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async, rerun: 64) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async, rerun: 64) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000003c0)={"df42901f74e4f0ee733f0de1588f68434688f8b7ce67f1c13acf11c03b9b55ae", r2}) (async) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000080)) (async) r3 = syz_open_dev$audion(&(0x7f0000000100), 0x1, 0x632580) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f0000000340)={{&(0x7f00000002c0)={'KERNEL\x00', {&(0x7f0000000200)=@adf_hex={@normal='NumberDcInstances\x00', {0x1f}, {&(0x7f0000000140)=@adf_dec={@format={'Dc', '2', 'RingSymRx\x00'}, {0x6}}}}}}}, 0xd4}) r4 = socket(0x21, 0x2, 0xa783) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r4, 0x800443d3, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8, 0x76, 0x7}) (async, rerun: 64) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) (async, rerun: 32) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000400)={0x4867, "b8f3db8ad563e09489855d498bf8d311ba3d7b38cba618c75c09cc9f1cb0628b"}) (async, rerun: 32) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r6) 16:01:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x40000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, {0xa, 0x4e24, 0xfffffff7, @local, 0xa88}, r1, 0x1ff}}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:44 executing program 0: getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000340)={0x3, @default, r0}) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) (async) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xc, &(0x7f0000000200)=0x3f, 0x4) (async) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f00000001c0)={@bcast, @null, 0x2, 0x20}) (async) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000240)) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r2, 0x1, 0x1, 0x90}}, 0x20) 16:01:44 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:44 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x1001) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) r3 = syz_open_dev$audion(&(0x7f0000000080), 0x8, 0x181000) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x4}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:44 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x1, {0x9, 0x80000001, "e4d3e0144efe83bf19834bc42c34cb566add2aa31a3b6e5077308e7023b844e1279c199f45f439115c134d8398cd4568e625fd11b54131c2fe78f59fbf6cee0c6a6b933dd59917e9eb0bc0ea473b8f39b42088d0d0bb05e069bef19bf95d19296aa075a7b333a1136cc098e2a75951644780c20fc16edf4c73a6035098cc8676dcd5226b1285341548b81cbee2ed4e29c8af58c2add317c587018bba8a6ac9f3b3171c217f0ad6f38f5ded26acb3a5d7d3cb029368722450861b57a6e978a9f3882fced9aeab35a34e6f18d60e86e536d12787f80a913c7e4468430f8bcc318e32d14272082e699e92208e8d223b66a59f92fc099dca112bd0b9bedcede70123", 0xb7, 0x7f, 0x81, 0x8, 0x0, 0x3, 0x8}}}, 0x128) r1 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r4, 0x80, "710c1f", "6fef4675470972e4885ec3a7b5526b0b90ea5f2b9f8ed56edc90342a44b646189851931d5a85b1465e4d269c7b24a66cd01b973b9768c224b175545132355317f4963d80b1e4fc8a4a494154a71511081813ad59912feeca3a22cbb9031f32e18b857432fcaf3cf1b0df0913cccd0cdbfc2dc65b33f8296574c86b488beebfe5d27c57ef14bdf7a7fc162ee6fea05a2e416092a0fbc12eb61fad834d8944d59f6bb2a5bed350dbfdd30033e0983d9ee2fdf85dd40f098c2163bcc92e70f33879211507d9283d01eec3c75cddba081505ff6b02d9854f326641c155faf6cb8c2bd61840450a5a7a863066473996e017aa341752772e36ca98bffa050f720c9145"}}, 0x110) accept$alg(r1, 0x0, 0x0) 16:01:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x40000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, {0xa, 0x4e24, 0xfffffff7, @local, 0xa88}, r1, 0x1ff}}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x40000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, {0xa, 0x4e24, 0xfffffff7, @local, 0xa88}, r1, 0x1ff}}, 0x48) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) 16:01:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0), r1}}, 0x20) socketpair(0x1d, 0x2, 0x7, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000200), 0x4) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001e40), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x3, {0xa, 0x4e22, 0xca, @remote, 0x1ff}, r5}}, 0x38) 16:01:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x8, 0x7800, 0x6f8d, 0x0, {{0x17, 0x4, 0x1, 0x0, 0x5c, 0x65, 0x0, 0x1f, 0x29, 0x0, @remote, @empty, {[@generic={0x44, 0x12, "aee184c4093311dbec997aa8895b3f2b"}, @noop, @ssrr={0x89, 0x13, 0x5b, [@broadcast, @broadcast, @private=0xa010100, @broadcast]}, @ssrr={0x89, 0x1f, 0xb8, [@multicast2, @dev={0xac, 0x14, 0x14, 0x17}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @local, @private=0x2]}, @end]}}}}}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x13f}}, 0x20) 16:01:44 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x1001) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) (async) r3 = syz_open_dev$audion(&(0x7f0000000080), 0x8, 0x181000) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x2, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x4}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:44 executing program 1: ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"0ba4426601c75727171db8ee3c285fae90de066f0058142731bf567ee0770193", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000380)={"ea3935bf23bee6e493378ca37a02ddb1252e73c909b1252fc5ed89d254034a23", r0, 0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000003c0)={"df42901f74e4f0ee733f0de1588f68434688f8b7ce67f1c13acf11c03b9b55ae", r2}) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000080)) r3 = syz_open_dev$audion(&(0x7f0000000100), 0x1, 0x632580) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f0000000340)={{&(0x7f00000002c0)={'KERNEL\x00', {&(0x7f0000000200)=@adf_hex={@normal='NumberDcInstances\x00', {0x1f}, {&(0x7f0000000140)=@adf_dec={@format={'Dc', '2', 'RingSymRx\x00'}, {0x6}}}}}}}, 0xd4}) r4 = socket(0x21, 0x2, 0xa783) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r4, 0x800443d3, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8, 0x76, 0x7}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000400)={0x4867, "b8f3db8ad563e09489855d498bf8d311ba3d7b38cba618c75c09cc9f1cb0628b"}) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r6) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"0ba4426601c75727171db8ee3c285fae90de066f0058142731bf567ee0770193"}) (async) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000380)={"ea3935bf23bee6e493378ca37a02ddb1252e73c909b1252fc5ed89d254034a23", r0}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000003c0)={"df42901f74e4f0ee733f0de1588f68434688f8b7ce67f1c13acf11c03b9b55ae", r2}) (async) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000080)) (async) syz_open_dev$audion(&(0x7f0000000100), 0x1, 0x632580) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f0000000340)={{&(0x7f00000002c0)={'KERNEL\x00', {&(0x7f0000000200)=@adf_hex={@normal='NumberDcInstances\x00', {0x1f}, {&(0x7f0000000140)=@adf_dec={@format={'Dc', '2', 'RingSymRx\x00'}, {0x6}}}}}}}, 0xd4}) (async) socket(0x21, 0x2, 0xa783) (async) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r4, 0x800443d3, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8, 0x76, 0x7}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000400)={0x4867, "b8f3db8ad563e09489855d498bf8d311ba3d7b38cba618c75c09cc9f1cb0628b"}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r6) (async) 16:01:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x40000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, {0xa, 0x4e24, 0xfffffff7, @local, 0xa88}, r1, 0x1ff}}, 0x48) (async, rerun: 32) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x106}}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x8, 0x700, 0x2, 0xe0000000, {{0x2f, 0x4, 0x2, 0x8, 0xbc, 0x64, 0x0, 0xc9, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x30}, {[@cipso={0x86, 0x27, 0x0, [{0x1, 0xd, "dee7570f69183330400633"}, {0x2, 0xb, "f5fe27900acb6739a1"}, {0x0, 0x9, "424d484fa4002f"}]}, @timestamp_prespec={0x44, 0x1c, 0x1a, 0x3, 0x4, [{@private=0xa010100, 0x8}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x100}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x9f}]}, @lsrr={0x83, 0xb, 0x76, [@dev={0xac, 0x14, 0x14, 0x35}, @dev={0xac, 0x14, 0x14, 0x34}]}, @lsrr={0x83, 0x17, 0x44, [@broadcast, @rand_addr=0x64010100, @local, @remote, @dev={0xac, 0x14, 0x14, 0xd}]}, @ssrr={0x89, 0x7, 0x13, [@multicast2]}, @timestamp_addr={0x44, 0x3c, 0xce, 0x1, 0x6, [{@rand_addr=0x64010101, 0x10001}, {@multicast1, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0xf33}, {@local, 0x7b0}, {@multicast1, 0xfffffe01}, {@multicast1, 0x3}, {@loopback, 0x1f}]}]}}}}}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000200)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3b6b1224, 0x5, 0x5}) 16:01:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x8, 0x7800, 0x6f8d, 0x0, {{0x17, 0x4, 0x1, 0x0, 0x5c, 0x65, 0x0, 0x1f, 0x29, 0x0, @remote, @empty, {[@generic={0x44, 0x12, "aee184c4093311dbec997aa8895b3f2b"}, @noop, @ssrr={0x89, 0x13, 0x5b, [@broadcast, @broadcast, @private=0xa010100, @broadcast]}, @ssrr={0x89, 0x1f, 0xb8, [@multicast2, @dev={0xac, 0x14, 0x14, 0x17}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @local, @private=0x2]}, @end]}}}}}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x13f}}, 0x20) 16:01:44 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x1, {0x9, 0x80000001, "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", 0xb7, 0x7f, 0x81, 0x8, 0x0, 0x3, 0x8}}}, 0x128) r1 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r4, 0x80, "710c1f", "6fef4675470972e4885ec3a7b5526b0b90ea5f2b9f8ed56edc90342a44b646189851931d5a85b1465e4d269c7b24a66cd01b973b9768c224b175545132355317f4963d80b1e4fc8a4a494154a71511081813ad59912feeca3a22cbb9031f32e18b857432fcaf3cf1b0df0913cccd0cdbfc2dc65b33f8296574c86b488beebfe5d27c57ef14bdf7a7fc162ee6fea05a2e416092a0fbc12eb61fad834d8944d59f6bb2a5bed350dbfdd30033e0983d9ee2fdf85dd40f098c2163bcc92e70f33879211507d9283d01eec3c75cddba081505ff6b02d9854f326641c155faf6cb8c2bd61840450a5a7a863066473996e017aa341752772e36ca98bffa050f720c9145"}}, 0x110) (async) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r4, 0x80, "710c1f", "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"}}, 0x110) accept$alg(r1, 0x0, 0x0) 16:01:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0), r1}}, 0x20) socketpair(0x1d, 0x2, 0x7, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000200), 0x4) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001e40), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r5}}, 0x18) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x3, {0xa, 0x4e22, 0xca, @remote, 0x1ff}, r5}}, 0x38) 16:01:44 executing program 5: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r0, 0x300, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8082) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x1, @remote}, {0xa, 0x0, 0x0, @private1, 0x4}, r2, 0xfffffffd}}, 0x48) 16:01:44 executing program 5: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r0, 0x300, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8082) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r2}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x1, @remote}, {0xa, 0x0, 0x0, @private1, 0x4}, r2, 0xfffffffd}}, 0x48) 16:01:44 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) socketpair(0x26, 0x6, 0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syz_tun\x00'}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20040001) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x4, 0x301f01) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000080)={"11c61e8a09adbebb60fca3d228e14c6cd5e4526705bd22deab93005871665fe2"}) 16:01:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x8, 0x7800, 0x6f8d, 0x0, {{0x17, 0x4, 0x1, 0x0, 0x5c, 0x65, 0x0, 0x1f, 0x29, 0x0, @remote, @empty, {[@generic={0x44, 0x12, "aee184c4093311dbec997aa8895b3f2b"}, @noop, @ssrr={0x89, 0x13, 0x5b, [@broadcast, @broadcast, @private=0xa010100, @broadcast]}, @ssrr={0x89, 0x1f, 0xb8, [@multicast2, @dev={0xac, 0x14, 0x14, 0x17}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @local, @private=0x2]}, @end]}}}}}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x13f}}, 0x20) 16:01:44 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x106}}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x8, 0x700, 0x2, 0xe0000000, {{0x2f, 0x4, 0x2, 0x8, 0xbc, 0x64, 0x0, 0xc9, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x30}, {[@cipso={0x86, 0x27, 0x0, [{0x1, 0xd, "dee7570f69183330400633"}, {0x2, 0xb, "f5fe27900acb6739a1"}, {0x0, 0x9, "424d484fa4002f"}]}, @timestamp_prespec={0x44, 0x1c, 0x1a, 0x3, 0x4, [{@private=0xa010100, 0x8}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x100}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x9f}]}, @lsrr={0x83, 0xb, 0x76, [@dev={0xac, 0x14, 0x14, 0x35}, @dev={0xac, 0x14, 0x14, 0x34}]}, @lsrr={0x83, 0x17, 0x44, [@broadcast, @rand_addr=0x64010100, @local, @remote, @dev={0xac, 0x14, 0x14, 0xd}]}, @ssrr={0x89, 0x7, 0x13, [@multicast2]}, @timestamp_addr={0x44, 0x3c, 0xce, 0x1, 0x6, [{@rand_addr=0x64010101, 0x10001}, {@multicast1, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0xf33}, {@local, 0x7b0}, {@multicast1, 0xfffffe01}, {@multicast1, 0x3}, {@loopback, 0x1f}]}]}}}}}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000200)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3b6b1224, 0x5, 0x5}) 16:01:44 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0), r1}}, 0x20) socketpair(0x1d, 0x2, 0x7, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000200), 0x4) (async) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000200), 0x4) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001e40), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x3, {0xa, 0x4e22, 0xca, @remote, 0x1ff}, r5}}, 0x38) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x3, {0xa, 0x4e22, 0xca, @remote, 0x1ff}, r5}}, 0x38) 16:01:44 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x1, {0x9, 0x80000001, "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", 0xb7, 0x7f, 0x81, 0x8, 0x0, 0x3, 0x8}}}, 0x128) r1 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async, rerun: 32) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async, rerun: 32) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r4, 0x80, "710c1f", "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"}}, 0x110) accept$alg(r1, 0x0, 0x0) 16:01:44 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) socketpair(0x26, 0x6, 0x4, &(0x7f00000000c0)) (async) socketpair(0x26, 0x6, 0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syz_tun\x00'}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20040001) syz_open_dev$audion(&(0x7f0000000000), 0x4, 0x301f01) (async) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x4, 0x301f01) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000080)={"11c61e8a09adbebb60fca3d228e14c6cd5e4526705bd22deab93005871665fe2"}) 16:01:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x80, 0xf820, 0x2, 0x7, {{0x28, 0x4, 0x3, 0x9, 0xa0, 0x64, 0x0, 0x7f, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @timestamp_prespec={0x44, 0x2c, 0x32, 0x3, 0x3, [{@rand_addr=0x64010100, 0x8}, {@rand_addr=0x64010101, 0x61}, {@broadcast, 0xffffffff}, {@loopback, 0x3f}, {@remote, 0xa7}]}, @ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x1c, 0xa3, 0x3, 0x3, [{@loopback, 0x1}, {@broadcast, 0x1}, {@broadcast, 0x8}]}, @generic={0x7, 0x8, "1bef1923f476"}, @timestamp_addr={0x44, 0x34, 0xf2, 0x1, 0x4, [{@rand_addr=0x64010102, 0x3f}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@remote, 0xc40}, {@remote, 0x5}, {@loopback, 0x8}]}]}}}}}) 16:01:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x106}}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x8, 0x700, 0x2, 0xe0000000, {{0x2f, 0x4, 0x2, 0x8, 0xbc, 0x64, 0x0, 0xc9, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x30}, {[@cipso={0x86, 0x27, 0x0, [{0x1, 0xd, "dee7570f69183330400633"}, {0x2, 0xb, "f5fe27900acb6739a1"}, {0x0, 0x9, "424d484fa4002f"}]}, @timestamp_prespec={0x44, 0x1c, 0x1a, 0x3, 0x4, [{@private=0xa010100, 0x8}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x100}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x9f}]}, @lsrr={0x83, 0xb, 0x76, [@dev={0xac, 0x14, 0x14, 0x35}, @dev={0xac, 0x14, 0x14, 0x34}]}, @lsrr={0x83, 0x17, 0x44, [@broadcast, @rand_addr=0x64010100, @local, @remote, @dev={0xac, 0x14, 0x14, 0xd}]}, @ssrr={0x89, 0x7, 0x13, [@multicast2]}, @timestamp_addr={0x44, 0x3c, 0xce, 0x1, 0x6, [{@rand_addr=0x64010101, 0x10001}, {@multicast1, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0xf33}, {@local, 0x7b0}, {@multicast1, 0xfffffe01}, {@multicast1, 0x3}, {@loopback, 0x1f}]}]}}}}}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000200)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3b6b1224, 0x5, 0x5}) socket$inet_udp(0x2, 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x106}}, 0x20) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x8, 0x700, 0x2, 0xe0000000, {{0x2f, 0x4, 0x2, 0x8, 0xbc, 0x64, 0x0, 0xc9, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x30}, {[@cipso={0x86, 0x27, 0x0, [{0x1, 0xd, "dee7570f69183330400633"}, {0x2, 0xb, "f5fe27900acb6739a1"}, {0x0, 0x9, "424d484fa4002f"}]}, @timestamp_prespec={0x44, 0x1c, 0x1a, 0x3, 0x4, [{@private=0xa010100, 0x8}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x100}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x9f}]}, @lsrr={0x83, 0xb, 0x76, [@dev={0xac, 0x14, 0x14, 0x35}, @dev={0xac, 0x14, 0x14, 0x34}]}, @lsrr={0x83, 0x17, 0x44, [@broadcast, @rand_addr=0x64010100, @local, @remote, @dev={0xac, 0x14, 0x14, 0xd}]}, @ssrr={0x89, 0x7, 0x13, [@multicast2]}, @timestamp_addr={0x44, 0x3c, 0xce, 0x1, 0x6, [{@rand_addr=0x64010101, 0x10001}, {@multicast1, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0xf33}, {@local, 0x7b0}, {@multicast1, 0xfffffe01}, {@multicast1, 0x3}, {@loopback, 0x1f}]}]}}}}}) (async) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000200)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3b6b1224, 0x5, 0x5}) (async) 16:01:44 executing program 5: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r0, 0x300, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8082) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r2}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x1, @remote}, {0xa, 0x0, 0x0, @private1, 0x4}, r2, 0xfffffffd}}, 0x48) 16:01:44 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 64) socketpair(0x26, 0x6, 0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syz_tun\x00'}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20040001) (async) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x4, 0x301f01) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000080)={"11c61e8a09adbebb60fca3d228e14c6cd5e4526705bd22deab93005871665fe2"}) 16:01:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x80, 0xf820, 0x2, 0x7, {{0x28, 0x4, 0x3, 0x9, 0xa0, 0x64, 0x0, 0x7f, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @timestamp_prespec={0x44, 0x2c, 0x32, 0x3, 0x3, [{@rand_addr=0x64010100, 0x8}, {@rand_addr=0x64010101, 0x61}, {@broadcast, 0xffffffff}, {@loopback, 0x3f}, {@remote, 0xa7}]}, @ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x1c, 0xa3, 0x3, 0x3, [{@loopback, 0x1}, {@broadcast, 0x1}, {@broadcast, 0x8}]}, @generic={0x7, 0x8, "1bef1923f476"}, @timestamp_addr={0x44, 0x34, 0xf2, 0x1, 0x4, [{@rand_addr=0x64010102, 0x3f}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@remote, 0xc40}, {@remote, 0x5}, {@loopback, 0x8}]}]}}}}}) 16:01:44 executing program 4: ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@default, @null, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:01:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x7fffffffffffffff, 0x4801) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r2, 0x1}, 0x14}}, 0x0) socketpair(0x1f, 0x3, 0x7fff, &(0x7f0000000380)={0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000000340), r4) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r2, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x81}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffc}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x14) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$SIOCAX25DELUID(r6, 0x89e2, &(0x7f0000000080)={0x3, @null, 0xee01}) 16:01:44 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000400)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x9, 0x4, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f00000001c0)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r3, 0xc0, "1f1525", "6087d5bcf115f654ece2739c6797215a0ae1568ed28c5e284fafcd51f11792a4df3825dda59cefb226f246d64cc1b1f4e26f0e8cffea8134d15506b9360110f057e5af2691c8aed87671daa04776353ed5dcb56b7f8280a546bfc4c5bfd407355016ea31a6126768fc810ca36cd0aa3f170a8f30b18ed2fda97d781e29bf0e669d45ac841b1e8b94e6a7e0955fbd94d8b4ee3593d2c393f6fb36faad398ba6185ec0df99b3d0d71c3d60581668ffeebfe401990413ec6244db27e7011fd80a5e39ababc69c23bc4e66ff9c289e760a54a5007713e8560b953cc1a3d28d8e47beb60dc6a3f80c2e6d0dfdce3bf30a9f165596682be5cbd58746074270d81d8844"}}, 0x110) 16:01:44 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) 16:01:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x80, 0xf820, 0x2, 0x7, {{0x28, 0x4, 0x3, 0x9, 0xa0, 0x64, 0x0, 0x7f, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @timestamp_prespec={0x44, 0x2c, 0x32, 0x3, 0x3, [{@rand_addr=0x64010100, 0x8}, {@rand_addr=0x64010101, 0x61}, {@broadcast, 0xffffffff}, {@loopback, 0x3f}, {@remote, 0xa7}]}, @ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x1c, 0xa3, 0x3, 0x3, [{@loopback, 0x1}, {@broadcast, 0x1}, {@broadcast, 0x8}]}, @generic={0x7, 0x8, "1bef1923f476"}, @timestamp_addr={0x44, 0x34, 0xf2, 0x1, 0x4, [{@rand_addr=0x64010102, 0x3f}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@remote, 0xc40}, {@remote, 0x5}, {@loopback, 0x8}]}]}}}}}) 16:01:44 executing program 4: ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@default, @null, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:01:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:44 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x19b}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0xc0) 16:01:44 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) (async) 16:01:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x7fffffffffffffff, 0x4801) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r2, 0x1}, 0x14}}, 0x0) socketpair(0x1f, 0x3, 0x7fff, &(0x7f0000000380)={0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000000340), r4) (async) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r2, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x81}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffc}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x14) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) (async) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$SIOCAX25DELUID(r6, 0x89e2, &(0x7f0000000080)={0x3, @null, 0xee01}) 16:01:44 executing program 4: ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@default, @null, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:01:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async, rerun: 64) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x7fffffffffffffff, 0x4801) (async, rerun: 64) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) socketpair(0x1f, 0x3, 0x7fff, &(0x7f0000000380)={0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000000340), r4) (async, rerun: 64) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r2, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x81}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffc}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x14) (rerun: 64) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$SIOCAX25DELUID(r6, 0x89e2, &(0x7f0000000080)={0x3, @null, 0xee01}) 16:01:44 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4040) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x19b}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0xc0) 16:01:45 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000400)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x9, 0x4, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f00000001c0)}}, 0x10) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r3, 0xc0, "1f1525", "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"}}, 0x110) 16:01:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) 16:01:45 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket(0x2b, 0x800, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0xc014) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000180)=0x2, 0x4) 16:01:45 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000680)={0x5, 0x10, 0xfa00, {&(0x7f0000000480), r1, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) 16:01:45 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x19b}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0xc0) 16:01:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000001a40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f00000001c0)={0x2d, r1, 0x100, 0x0, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x0, 0xb, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0x81}, @BATADV_ATTR_HOP_PENALTY, @BATADV_ATTR_VLANID={0x0, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN, @BATADV_ATTR_ISOLATION_MASK={0x0, 0x2c, 0x3}, @BATADV_ATTR_HARD_IFINDEX, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x0, 0x2f, 0x1}]}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x4044001) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x52204880}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000c84}, 0x54083) 16:01:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 16:01:45 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000680)={0x5, 0x10, 0xfa00, {&(0x7f0000000480), r1, 0x1}}, 0x18) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) 16:01:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) (async, rerun: 32) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) (rerun: 32) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) (async, rerun: 64) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async, rerun: 64) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000001a40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f00000001c0)={0x2d, r1, 0x100, 0x0, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x0, 0xb, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0x81}, @BATADV_ATTR_HOP_PENALTY, @BATADV_ATTR_VLANID={0x0, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN, @BATADV_ATTR_ISOLATION_MASK={0x0, 0x2c, 0x3}, @BATADV_ATTR_HARD_IFINDEX, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x0, 0x2f, 0x1}]}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x4044001) (async, rerun: 32) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x52204880}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000c84}, 0x54083) (rerun: 32) 16:01:45 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket(0x2b, 0x800, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0xc014) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000180)=0x2, 0x4) socket(0x2, 0xa, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) socket(0x2b, 0x800, 0x9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0xc014) (async) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000180)=0x2, 0x4) (async) 16:01:45 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 16:01:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) (async) 16:01:46 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000400)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x9, 0x4, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f00000001c0)}}, 0x10) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r3, 0xc0, "1f1525", "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"}}, 0x110) 16:01:46 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000680)={0x5, 0x10, 0xfa00, {&(0x7f0000000480), r1, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000680)={0x5, 0x10, 0xfa00, {&(0x7f0000000480), r1, 0x1}}, 0x18) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x106, 0x6}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) (async) 16:01:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 16:01:46 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) r1 = socket(0x2b, 0x800, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0xc014) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000180)=0x2, 0x4) 16:01:46 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) (rerun: 64) 16:01:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) (async) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000001a40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f00000001c0)={0x2d, r1, 0x100, 0x0, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x0, 0xb, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0x81}, @BATADV_ATTR_HOP_PENALTY, @BATADV_ATTR_VLANID={0x0, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN, @BATADV_ATTR_ISOLATION_MASK={0x0, 0x2c, 0x3}, @BATADV_ATTR_HARD_IFINDEX, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x0, 0x2f, 0x1}]}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x4044001) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x52204880}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000c84}, 0x54083) 16:01:46 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24008050, &(0x7f0000000040)={0x2, 0x2, @private=0xa010102}, 0x10) 16:01:46 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x0, 0x13, @local}, r1, 0xffff}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:46 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$@\x00\x00', @ANYRES16=0x0, @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x140}, 0x100) 16:01:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r1) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x44000}, 0x58c10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0xd0c, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6998}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) 16:01:46 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 16:01:46 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {0x0, 0x0, [0x0, 0x2]}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:46 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x0, 0x13, @local}, r1, 0xffff}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x0, 0x13, @local}, r1, 0xffff}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) (async) 16:01:46 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) (async, rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) sendto$inet(r1, 0x0, 0x0, 0x24008050, &(0x7f0000000040)={0x2, 0x2, @private=0xa010102}, 0x10) 16:01:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r1) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x44000}, 0x58c10) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0xd0c, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6998}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) 16:01:46 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$@\x00\x00', @ANYRES16=0x0, @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x140}, 0x100) 16:01:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000080)="7525759607e111dd1a41a305819d0c7f1abc47fc918867d2032733a8aa2cc736e0fa3cdce695f4bba4583615b9b02862fd8a93b3b6fdad5ee7421cf10c206dd57370553067abd6557b1b31e1862d5dc88e248adca0c2d29a1dc9578c3d09f0f3bed4294c5c246a6fca4b6a4efd2a2a23037877b4e1cd5fb7", 0x78, 0x40, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) 16:01:46 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {0x0, 0x0, [0x0, 0x2]}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000080)="7525759607e111dd1a41a305819d0c7f1abc47fc918867d2032733a8aa2cc736e0fa3cdce695f4bba4583615b9b02862fd8a93b3b6fdad5ee7421cf10c206dd57370553067abd6557b1b31e1862d5dc88e248adca0c2d29a1dc9578c3d09f0f3bed4294c5c246a6fca4b6a4efd2a2a23037877b4e1cd5fb7", 0x78, 0x40, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) 16:01:46 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x0, 0x13, @local}, r1, 0xffff}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:46 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24008050, &(0x7f0000000040)={0x2, 0x2, @private=0xa010102}, 0x10) 16:01:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r1) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r1) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x44000}, 0x58c10) (async) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x44000}, 0x58c10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0xd0c, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6998}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) 16:01:46 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$@\x00\x00', @ANYRES16=0x0, @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x140}, 0x100) 16:01:46 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {0x0, 0x0, [0x0, 0x2]}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async, rerun: 32) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32) sendto$inet(r1, &(0x7f0000000080)="7525759607e111dd1a41a305819d0c7f1abc47fc918867d2032733a8aa2cc736e0fa3cdce695f4bba4583615b9b02862fd8a93b3b6fdad5ee7421cf10c206dd57370553067abd6557b1b31e1862d5dc88e248adca0c2d29a1dc9578c3d09f0f3bed4294c5c246a6fca4b6a4efd2a2a23037877b4e1cd5fb7", 0x78, 0x40, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) 16:01:46 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:46 executing program 5: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x76ef373f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240000d4}, 0xc1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8090) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x392c, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r3}, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r2}}, 0x48) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000008c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000740)}}, 0x10) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x1, 0x2}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000a40)={"c69f632651d226a6256582f27bac2f6dcfcdc83e429f857f4b76c2bcb49d5b1e", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f0000000cc0)={""/32, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}, {}]}) 16:01:46 executing program 4: r0 = socket(0xf, 0x4, 0x1) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) 16:01:46 executing program 3: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x2b, @dev={0xac, 0x14, 0x14, 0x2c}, 0x4e23, 0x2, 'lblc\x00', 0x24, 0x4, 0x5e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x14002, 0x7, 0x200, 0xffff}}, 0x44) 16:01:46 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r4, 0x6}}, 0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f0000000440), r4}}, 0x18) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {r4, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000380), r5, 0x0, 0x2, 0x4}}, 0x20) 16:01:47 executing program 5: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x76ef373f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240000d4}, 0xc1) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8090) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x392c, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r3}, 0x4) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r2}}, 0x48) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000008c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000740)}}, 0x10) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x1, 0x2}) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) (async) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000a40)={"c69f632651d226a6256582f27bac2f6dcfcdc83e429f857f4b76c2bcb49d5b1e", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f0000000cc0)={""/32, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}, {}]}) 16:01:47 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:47 executing program 4: socket(0xf, 0x4, 0x1) (async) r0 = socket(0xf, 0x4, 0x1) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) 16:01:47 executing program 3: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x2b, @dev={0xac, 0x14, 0x14, 0x2c}, 0x4e23, 0x2, 'lblc\x00', 0x24, 0x4, 0x5e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x14002, 0x7, 0x200, 0xffff}}, 0x44) 16:01:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 16:01:47 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r4, 0x6}}, 0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f0000000440), r4}}, 0x18) (async) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {r4, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000380), r5, 0x0, 0x2, 0x4}}, 0x20) 16:01:47 executing program 5: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x76ef373f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240000d4}, 0xc1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8090) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x392c, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r3}, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r2}}, 0x48) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000008c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000740)}}, 0x10) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x1, 0x2}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000a40)={"c69f632651d226a6256582f27bac2f6dcfcdc83e429f857f4b76c2bcb49d5b1e", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f0000000cc0)={""/32, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}, {}]}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x76ef373f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240000d4}, 0xc1) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8090) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x392c}, 0x8) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r3}, 0x4) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r2}}, 0x48) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000008c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000740)}}, 0x10) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x1, 0x2}) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) (async) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000a40)={"c69f632651d226a6256582f27bac2f6dcfcdc83e429f857f4b76c2bcb49d5b1e"}) (async) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f0000000cc0)={""/32, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}, {}]}) (async) 16:01:47 executing program 4: r0 = socket(0xf, 0x4, 0x1) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) socket(0xf, 0x4, 0x1) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) (async) 16:01:47 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:47 executing program 3: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x2b, @dev={0xac, 0x14, 0x14, 0x2c}, 0x4e23, 0x2, 'lblc\x00', 0x24, 0x4, 0x5e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x14002, 0x7, 0x200, 0xffff}}, 0x44) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x2b, @dev={0xac, 0x14, 0x14, 0x2c}, 0x4e23, 0x2, 'lblc\x00', 0x24, 0x4, 0x5e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x14002, 0x7, 0x200, 0xffff}}, 0x44) (async) 16:01:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) (async) 16:01:47 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0), 0x2, 0x9}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r4, 0x6}}, 0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f0000000440), r4}}, 0x18) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {r4, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0), 0x2, 0x8}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000380), r5, 0x0, 0x2, 0x4}}, 0x20) 16:01:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x4, r2, 0x1c, 0x0, @ib={0x1b, 0x8, 0x3f, {"4215b4dcc31622cac6b51f4be713723d"}, 0xb0e, 0x4, 0x7fff}}}, 0xa0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:47 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) accept$alg(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:47 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20008000}, 0xfffffffffffffd8e, &(0x7f0000000180)={&(0x7f0000000200)={0x60, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x23}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netpci0\x00'}, @L2TP_ATTR_MRU={0xfffffeef, 0x1d, 0x400}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5331}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffe}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x24008048}, 0x4040800) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) 16:01:47 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) connect$tipc(r0, &(0x7f00000002c0)=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x3}}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x40, @empty}, {0xa, 0x0, 0x0, @empty}}}, 0x48) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000400), r3}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}}}, 0x48) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x2, 0x81, 0x5, 0x30, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0xe}, 0x48) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000780), 0x210000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000730700000000000005000000656a0100080000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x20000, 0x0, &(0x7f00000002c0), 0x41100, 0x12, '\x00', 0x0, 0x1c, r2, 0x8, &(0x7f0000000300)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x3, 0x4, 0x7}, 0x10, 0x14566, r2, 0x0, &(0x7f00000006c0)=[r4, r2, r2, r2, r5, r2]}, 0x80) 16:01:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 16:01:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x4, r2, 0x1c, 0x0, @ib={0x1b, 0x8, 0x3f, {"4215b4dcc31622cac6b51f4be713723d"}, 0xb0e, 0x4, 0x7fff}}}, 0xa0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:47 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20008000}, 0xfffffffffffffd8e, &(0x7f0000000180)={&(0x7f0000000200)={0x60, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x23}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netpci0\x00'}, @L2TP_ATTR_MRU={0xfffffeef, 0x1d, 0x400}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5331}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffe}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x24008048}, 0x4040800) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) 16:01:47 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000427bd7000fbdbdf250800000008002b0007000000050035000100000005002f0000000000394c55d84a0300cc75acfe07b981bd03125f648169969a189a5e67c1e8b0bb166411ca803caa995113d3ffc684f0f0bfc387a020ffcbaa10a8b1619f4398d90fb37cf48fe8bd333ec236f332fe505062b0afa2ac93683453991733114c42a5ced0a9bd9bd7af1be7bda3d586f0b6673aacd7ca48da164a08b2397910e88f19e2d0bac89a64b4a2d90583022b41172d3bb8cb4ce890514f0bb8bbcc05d54808bde18238095b6ef1844c043ea8c08551d918c15a752b5791"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000]}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:47 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) (async) connect$tipc(r0, &(0x7f00000002c0)=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x3}}, 0x10) (async, rerun: 64) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x40, @empty}, {0xa, 0x0, 0x0, @empty}}}, 0x48) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000400), r3}}, 0x18) (async, rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}}}, 0x48) (async, rerun: 32) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x2, 0x81, 0x5, 0x30, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0xe}, 0x48) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000780), 0x210000, 0x0) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000730700000000000005000000656a0100080000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x20000, 0x0, &(0x7f00000002c0), 0x41100, 0x12, '\x00', 0x0, 0x1c, r2, 0x8, &(0x7f0000000300)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x3, 0x4, 0x7}, 0x10, 0x14566, r2, 0x0, &(0x7f00000006c0)=[r4, r2, r2, r2, r5, r2]}, 0x80) (rerun: 32) 16:01:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x4, r2, 0x1c, 0x0, @ib={0x1b, 0x8, 0x3f, {"4215b4dcc31622cac6b51f4be713723d"}, 0xb0e, 0x4, 0x7fff}}}, 0xa0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:47 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) (async) accept$alg(r0, 0x0, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:47 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000427bd7000fbdbdf250800000008002b0007000000050035000100000005002f0000000000394c55d84a0300cc75acfe07b981bd03125f648169969a189a5e67c1e8b0bb166411ca803caa995113d3ffc684f0f0bfc387a020ffcbaa10a8b1619f4398d90fb37cf48fe8bd333ec236f332fe505062b0afa2ac93683453991733114c42a5ced0a9bd9bd7af1be7bda3d586f0b6673aacd7ca48da164a08b2397910e88f19e2d0bac89a64b4a2d90583022b41172d3bb8cb4ce890514f0bb8bbcc05d54808bde18238095b6ef1844c043ea8c08551d918c15a752b5791"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000]}], r1, 0x1, 0x1, 0x90}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000427bd7000fbdbdf250800000008002b0007000000050035000100000005002f0000000000394c55d84a0300cc75acfe07b981bd03125f648169969a189a5e67c1e8b0bb166411ca803caa995113d3ffc684f0f0bfc387a020ffcbaa10a8b1619f4398d90fb37cf48fe8bd333ec236f332fe505062b0afa2ac93683453991733114c42a5ced0a9bd9bd7af1be7bda3d586f0b6673aacd7ca48da164a08b2397910e88f19e2d0bac89a64b4a2d90583022b41172d3bb8cb4ce890514f0bb8bbcc05d54808bde18238095b6ef1844c043ea8c08551d918c15a752b5791"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000]}], r1, 0x1, 0x1, 0x90}}, 0x20) (async) 16:01:47 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20008000}, 0xfffffffffffffd8e, &(0x7f0000000180)={&(0x7f0000000200)={0x60, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x23}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netpci0\x00'}, @L2TP_ATTR_MRU={0xfffffeef, 0x1d, 0x400}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5331}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffe}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x24008048}, 0x4040800) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) 16:01:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000080)=0x1e) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) socketpair(0x1e, 0x5, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000340)=[@acquire_done={0x40106309, 0x2}, @dead_binder_done, @acquire_done], 0x22, 0x0, &(0x7f0000000380)="46660ab518186a21f8709b0eeb281990a8cf2fb437f149f9b71501418003ec344718"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x0, 0x800000, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x2000cc20}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r3, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r6) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000c484973936d4a82aa092ec3edaaf6ac5fed8302208f9256e969ac194c7defb15f58d810bfc2fff13c0a37d742948d49cc38af8c274550d3002fe943759c0c4e97e65ed32b5149e9d", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r8, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf20}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9b}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x4800) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r3, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xf5}, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x64}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) 16:01:47 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) (async) accept$alg(r0, 0x0, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000080)=0x1e) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) socketpair(0x1e, 0x5, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) (async, rerun: 32) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) (async, rerun: 32) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) (async, rerun: 32) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000340)=[@acquire_done={0x40106309, 0x2}, @dead_binder_done, @acquire_done], 0x22, 0x0, &(0x7f0000000380)="46660ab518186a21f8709b0eeb281990a8cf2fb437f149f9b71501418003ec344718"}) (rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x0, 0x800000, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x2000cc20}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r3, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r6) (async) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000c484973936d4a82aa092ec3edaaf6ac5fed8302208f9256e969ac194c7defb15f58d810bfc2fff13c0a37d742948d49cc38af8c274550d3002fe943759c0c4e97e65ed32b5149e9d", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r8, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf20}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9b}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x4800) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r3, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xf5}, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x64}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) 16:01:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={r1}) 16:01:47 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000427bd7000fbdbdf250800000008002b0007000000050035000100000005002f0000000000394c55d84a0300cc75acfe07b981bd03125f648169969a189a5e67c1e8b0bb166411ca803caa995113d3ffc684f0f0bfc387a020ffcbaa10a8b1619f4398d90fb37cf48fe8bd333ec236f332fe505062b0afa2ac93683453991733114c42a5ced0a9bd9bd7af1be7bda3d586f0b6673aacd7ca48da164a08b2397910e88f19e2d0bac89a64b4a2d90583022b41172d3bb8cb4ce890514f0bb8bbcc05d54808bde18238095b6ef1844c043ea8c08551d918c15a752b5791"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000]}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:47 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) (async) connect$tipc(r0, &(0x7f00000002c0)=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x3}}, 0x10) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x40, @empty}, {0xa, 0x0, 0x0, @empty}}}, 0x48) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000400), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}}}, 0x48) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x2, 0x81, 0x5, 0x30, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0xe}, 0x48) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000780), 0x210000, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000730700000000000005000000656a0100080000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x20000, 0x0, &(0x7f00000002c0), 0x41100, 0x12, '\x00', 0x0, 0x1c, r2, 0x8, &(0x7f0000000300)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x3, 0x4, 0x7}, 0x10, 0x14566, r2, 0x0, &(0x7f00000006c0)=[r4, r2, r2, r2, r5, r2]}, 0x80) 16:01:47 executing program 4: r0 = socket(0x1e, 0x6, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0xc094}, 0x8000) 16:01:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000080)=0x1e) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={r1}) 16:01:47 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8, @private1, 0xdeb9}, {0xa, 0x4e22, 0x5, @remote, 0x71c}, r3, 0xffff}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20) 16:01:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) socketpair(0x1e, 0x5, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) (async) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000340)=[@acquire_done={0x40106309, 0x2}, @dead_binder_done, @acquire_done], 0x22, 0x0, &(0x7f0000000380)="46660ab518186a21f8709b0eeb281990a8cf2fb437f149f9b71501418003ec344718"}) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x0, 0x800000, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x2000cc20}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r3, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r6) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000c484973936d4a82aa092ec3edaaf6ac5fed8302208f9256e969ac194c7defb15f58d810bfc2fff13c0a37d742948d49cc38af8c274550d3002fe943759c0c4e97e65ed32b5149e9d", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000c484973936d4a82aa092ec3edaaf6ac5fed8302208f9256e969ac194c7defb15f58d810bfc2fff13c0a37d742948d49cc38af8c274550d3002fe943759c0c4e97e65ed32b5149e9d", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r8, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf20}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9b}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x4800) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r8, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf20}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9b}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x4800) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r3, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xf5}, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x64}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r3, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xf5}, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x64}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) 16:01:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={r1}) 16:01:47 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8, @private1, 0xdeb9}, {0xa, 0x4e22, 0x5, @remote, 0x71c}, r3, 0xffff}}, 0x48) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20) 16:01:47 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x74e2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x11000}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404c894) accept$ax25(0xffffffffffffffff, &(0x7f0000000600)={{0x3, @netrom}, [@rose, @bcast, @netrom, @rose, @remote, @rose, @rose, @netrom]}, &(0x7f0000000680)=0x48) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000006c0)={0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000740)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', r4, 0x7f08, 0x1, 0x3, 0x20, {{0x18, 0x4, 0x1, 0x0, 0x60, 0x64, 0x0, 0x3f, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x27, 0x45, [@broadcast, @remote, @local, @multicast2, @remote, @local, @dev={0xac, 0x14, 0x14, 0x32}, @broadcast, @rand_addr=0x64010101]}, @timestamp={0x44, 0x8, 0x26, 0x0, 0x7, [0x8]}, @timestamp={0x44, 0x1c, 0xba, 0x0, 0x9, [0x3, 0x101, 0xff, 0x8, 0x3, 0x3ff]}]}}}}}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r5, 0x400443c8, &(0x7f00000005c0)={r3, 0x3}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) 16:01:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000280)={0x7, &(0x7f00000001c0)=[{}, {@none}, {}, {}, {}, {@none}, {@fixed}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket(0x10, 0x615a6f8a54a8c92, 0xa) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r3) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096101, &(0x7f0000000800)={{&(0x7f0000000780)={'Accelerator1\x00', {&(0x7f0000000480)=@adf_str={@normal='NumberCyInstances\x00', {"9abe7087b125f4902241e8e0d08a06f7db3645223ac624360c63dd713b1b876d29f5bf0ad09e15e69e65f7696e486210791d075954f18245fbab809e4fc287c3"}, {&(0x7f00000003c0)=@adf_dec={@bank={'Bank', '4', 'CoreAffinity\x00'}, {0x7}}}}}, {&(0x7f0000000540)={'GENERAL\x00', {&(0x7f00000006c0)=@adf_str={@format={'Cy', '4', 'NumConcurrentAsymRequests\x00'}, {"b6357d8bdb6708d6985277d0674c15e63e8c57154bf620e7544ba221050dbf5b6c599934d336d753f48bbc7ec2a127af405fea801993d366a4a20261f62c3330"}}}}}}}, 0x7}) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x300, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000180)={0xffffffffffffffff, 0x9}) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xdc29b36702ca2ea9}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 16:01:47 executing program 4: r0 = socket(0x1e, 0x6, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0xc094}, 0x8000) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0xc094}, 0x8000) 16:01:47 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0, 0x40000}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}}, r1, 0x800002}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000180), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x4e22, 0x0, @local, 0x4}, r3, 0x40}}, 0x48) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000280), 0xffffffffffffffff, 0x4}}, 0x18) 16:01:47 executing program 4: r0 = socket(0x1e, 0x6, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0xc094}, 0x8000) socket(0x1e, 0x6, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0xc094}, 0x8000) (async) 16:01:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa03}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x0, 0x1, 0x3, 0x7, 0x9, 0x8}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0xcc, &(0x7f00000000c0)=""/204, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x0, 0xfffffffc, 0x769}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1, 0x1]}, 0x80) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:47 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x74e2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x11000}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404c894) accept$ax25(0xffffffffffffffff, &(0x7f0000000600)={{0x3, @netrom}, [@rose, @bcast, @netrom, @rose, @remote, @rose, @rose, @netrom]}, &(0x7f0000000680)=0x48) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000006c0)={0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000740)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', r4, 0x7f08, 0x1, 0x3, 0x20, {{0x18, 0x4, 0x1, 0x0, 0x60, 0x64, 0x0, 0x3f, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x27, 0x45, [@broadcast, @remote, @local, @multicast2, @remote, @local, @dev={0xac, 0x14, 0x14, 0x32}, @broadcast, @rand_addr=0x64010101]}, @timestamp={0x44, 0x8, 0x26, 0x0, 0x7, [0x8]}, @timestamp={0x44, 0x1c, 0xba, 0x0, 0x9, [0x3, 0x101, 0xff, 0x8, 0x3, 0x3ff]}]}}}}}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r5, 0x400443c8, &(0x7f00000005c0)={r3, 0x3}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x74e2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x11000}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404c894) (async) accept$ax25(0xffffffffffffffff, &(0x7f0000000600)={{0x3, @netrom}, [@rose, @bcast, @netrom, @rose, @remote, @rose, @rose, @netrom]}, &(0x7f0000000680)=0x48) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000006c0)={0xffffffffffffffff}, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000740)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', r4, 0x7f08, 0x1, 0x3, 0x20, {{0x18, 0x4, 0x1, 0x0, 0x60, 0x64, 0x0, 0x3f, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x27, 0x45, [@broadcast, @remote, @local, @multicast2, @remote, @local, @dev={0xac, 0x14, 0x14, 0x32}, @broadcast, @rand_addr=0x64010101]}, @timestamp={0x44, 0x8, 0x26, 0x0, 0x7, [0x8]}, @timestamp={0x44, 0x1c, 0xba, 0x0, 0x9, [0x3, 0x101, 0xff, 0x8, 0x3, 0x3ff]}]}}}}}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(r5, 0x400443c8, &(0x7f00000005c0)={r3, 0x3}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) (async) 16:01:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000280)={0x7, &(0x7f00000001c0)=[{}, {@none}, {}, {}, {}, {@none}, {@fixed}]}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket(0x10, 0x615a6f8a54a8c92, 0xa) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r3) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096101, &(0x7f0000000800)={{&(0x7f0000000780)={'Accelerator1\x00', {&(0x7f0000000480)=@adf_str={@normal='NumberCyInstances\x00', {"9abe7087b125f4902241e8e0d08a06f7db3645223ac624360c63dd713b1b876d29f5bf0ad09e15e69e65f7696e486210791d075954f18245fbab809e4fc287c3"}, {&(0x7f00000003c0)=@adf_dec={@bank={'Bank', '4', 'CoreAffinity\x00'}, {0x7}}}}}, {&(0x7f0000000540)={'GENERAL\x00', {&(0x7f00000006c0)=@adf_str={@format={'Cy', '4', 'NumConcurrentAsymRequests\x00'}, {"b6357d8bdb6708d6985277d0674c15e63e8c57154bf620e7544ba221050dbf5b6c599934d336d753f48bbc7ec2a127af405fea801993d366a4a20261f62c3330"}}}}}}}, 0x7}) (async) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x300, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000180)={0xffffffffffffffff, 0x9}) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xdc29b36702ca2ea9}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 16:01:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa03}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x0, 0x1, 0x3, 0x7, 0x9, 0x8}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0xcc, &(0x7f00000000c0)=""/204, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x0, 0xfffffffc, 0x769}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1, 0x1]}, 0x80) (async, rerun: 64) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (rerun: 64) 16:01:47 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0, 0x40000}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}}, r1, 0x800002}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000180), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x4e22, 0x0, @local, 0x4}, r3, 0x40}}, 0x48) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000280), 0xffffffffffffffff, 0x4}}, 0x18) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000280), 0xffffffffffffffff, 0x4}}, 0x18) 16:01:47 executing program 4: r0 = socket(0xa1cc7058e9f5b063, 0x5, 0x10000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fcdbdf2501000000140008006e6fe11a635cb79424d9352e3e687c820c72300000000000000000000000f520ecce79476612476109000200000005001200090000000c001600090000000000000005000d000000000008000b000100", @ANYRES32, @ANYBLOB="14001f00fc01000000000000000000000000000108001900ac1414bb0500140080000000"], 0x80}, 0x1, 0x0, 0x0, 0x200048c0}, 0x400c0) r1 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000)=0x3, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000140)={0x6f}, 0x4) socketpair(0x3, 0x80803, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x4, 0x40, &(0x7f0000000300)="d8ed26dc74da934520973a3be42e13687f73f432e616cd15e33971fb044d67abb7d16a15be26ad6b04515dab3b7f1355a773ca991259c409eee1a1781762b6fd", 0x0, 0x8b, 0x9, 0x70, 0x1000, 0x0, 0x9, 'syz1\x00'}) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000480)={r4, r5, 0x5, 0x4d, &(0x7f0000000400)="c49efba4cf8f5d407ce2a4fb65c5b12b3379a50badf8cdf5e6fde9f43344be5649c1d1be947509f9ab025ed9abeadd121ee0f4e121e17cca4e8a7a99c989e9d78f740e7e27e95c782f355a360c", 0xf6, 0x6, 0x7, 0x9, 0x0, 0x2, 0x1000, 'syz0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f00000001c0)={r6, 0x3}) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000100)=0x4) 16:01:48 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8, @private1, 0xdeb9}, {0xa, 0x4e22, 0x5, @remote, 0x71c}, r3, 0xffff}}, 0x48) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20) 16:01:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000280)={0x7, &(0x7f00000001c0)=[{}, {@none}, {}, {}, {}, {@none}, {@fixed}]}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket(0x10, 0x615a6f8a54a8c92, 0xa) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r3) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) (async, rerun: 32) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096101, &(0x7f0000000800)={{&(0x7f0000000780)={'Accelerator1\x00', {&(0x7f0000000480)=@adf_str={@normal='NumberCyInstances\x00', {"9abe7087b125f4902241e8e0d08a06f7db3645223ac624360c63dd713b1b876d29f5bf0ad09e15e69e65f7696e486210791d075954f18245fbab809e4fc287c3"}, {&(0x7f00000003c0)=@adf_dec={@bank={'Bank', '4', 'CoreAffinity\x00'}, {0x7}}}}}, {&(0x7f0000000540)={'GENERAL\x00', {&(0x7f00000006c0)=@adf_str={@format={'Cy', '4', 'NumConcurrentAsymRequests\x00'}, {"b6357d8bdb6708d6985277d0674c15e63e8c57154bf620e7544ba221050dbf5b6c599934d336d753f48bbc7ec2a127af405fea801993d366a4a20261f62c3330"}}}}}}}, 0x7}) (async, rerun: 32) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x300, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000180)={0xffffffffffffffff, 0x9}) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xdc29b36702ca2ea9}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 16:01:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa03}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x0, 0x1, 0x3, 0x7, 0x9, 0x8}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0xcc, &(0x7f00000000c0)=""/204, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x0, 0xfffffffc, 0x769}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1, 0x1]}, 0x80) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:48 executing program 4: r0 = socket(0xa1cc7058e9f5b063, 0x5, 0x10000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fcdbdf2501000000140008006e6fe11a635cb79424d9352e3e687c820c72300000000000000000000000f520ecce79476612476109000200000005001200090000000c001600090000000000000005000d000000000008000b000100", @ANYRES32, @ANYBLOB="14001f00fc01000000000000000000000000000108001900ac1414bb0500140080000000"], 0x80}, 0x1, 0x0, 0x0, 0x200048c0}, 0x400c0) r1 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000)=0x3, 0x4) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000140)={0x6f}, 0x4) (async) socketpair(0x3, 0x80803, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x4, 0x40, &(0x7f0000000300)="d8ed26dc74da934520973a3be42e13687f73f432e616cd15e33971fb044d67abb7d16a15be26ad6b04515dab3b7f1355a773ca991259c409eee1a1781762b6fd", 0x0, 0x8b, 0x9, 0x70, 0x1000, 0x0, 0x9, 'syz1\x00'}) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000480)={r4, r5, 0x5, 0x4d, &(0x7f0000000400)="c49efba4cf8f5d407ce2a4fb65c5b12b3379a50badf8cdf5e6fde9f43344be5649c1d1be947509f9ab025ed9abeadd121ee0f4e121e17cca4e8a7a99c989e9d78f740e7e27e95c782f355a360c", 0xf6, 0x6, 0x7, 0x9, 0x0, 0x2, 0x1000, 'syz0\x00'}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f00000001c0)={r6, 0x3}) (async) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000100)=0x4) 16:01:48 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x74e2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x11000}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404c894) accept$ax25(0xffffffffffffffff, &(0x7f0000000600)={{0x3, @netrom}, [@rose, @bcast, @netrom, @rose, @remote, @rose, @rose, @netrom]}, &(0x7f0000000680)=0x48) (async) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000006c0)={0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000740)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', r4, 0x7f08, 0x1, 0x3, 0x20, {{0x18, 0x4, 0x1, 0x0, 0x60, 0x64, 0x0, 0x3f, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x27, 0x45, [@broadcast, @remote, @local, @multicast2, @remote, @local, @dev={0xac, 0x14, 0x14, 0x32}, @broadcast, @rand_addr=0x64010101]}, @timestamp={0x44, 0x8, 0x26, 0x0, 0x7, [0x8]}, @timestamp={0x44, 0x1c, 0xba, 0x0, 0x9, [0x3, 0x101, 0xff, 0x8, 0x3, 0x3ff]}]}}}}}) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(r5, 0x400443c8, &(0x7f00000005c0)={r3, 0x3}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) 16:01:48 executing program 5: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0, 0x40000}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}}, r1, 0x800002}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0, 0x40000}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}}, r1, 0x800002}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000180), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x4e22, 0x0, @local, 0x4}, r3, 0x40}}, 0x48) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000280), 0xffffffffffffffff, 0x4}}, 0x18) 16:01:48 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x4c800, &(0x7f0000000040)={0x2, 0x1, @multicast2}, 0x10) 16:01:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x33c101) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x32}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x51) 16:01:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f00000001c0)={r3, 0xffff8694}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24040001) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000ec8c19341d41d1dc2e1f01a8c92741e3ee40a6", @ANYRES16=r1, @ANYBLOB="00022dbd7000fedbdf250e00000005002e0000000000050033000700000005003300000000000500350003000000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) 16:01:48 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x4c800, &(0x7f0000000040)={0x2, 0x1, @multicast2}, 0x10) 16:01:48 executing program 4: r0 = socket(0xa1cc7058e9f5b063, 0x5, 0x10000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fcdbdf2501000000140008006e6fe11a635cb79424d9352e3e687c820c72300000000000000000000000f520ecce79476612476109000200000005001200090000000c001600090000000000000005000d000000000008000b000100", @ANYRES32, @ANYBLOB="14001f00fc01000000000000000000000000000108001900ac1414bb0500140080000000"], 0x80}, 0x1, 0x0, 0x0, 0x200048c0}, 0x400c0) r1 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000)=0x3, 0x4) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000140)={0x6f}, 0x4) socketpair(0x3, 0x80803, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x4, 0x40, &(0x7f0000000300)="d8ed26dc74da934520973a3be42e13687f73f432e616cd15e33971fb044d67abb7d16a15be26ad6b04515dab3b7f1355a773ca991259c409eee1a1781762b6fd", 0x0, 0x8b, 0x9, 0x70, 0x1000, 0x0, 0x9, 'syz1\x00'}) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000480)={r4, r5, 0x5, 0x4d, &(0x7f0000000400)="c49efba4cf8f5d407ce2a4fb65c5b12b3379a50badf8cdf5e6fde9f43344be5649c1d1be947509f9ab025ed9abeadd121ee0f4e121e17cca4e8a7a99c989e9d78f740e7e27e95c782f355a360c", 0xf6, 0x6, 0x7, 0x9, 0x0, 0x2, 0x1000, 'syz0\x00'}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f00000001c0)={r6, 0x3}) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000100)=0x4) 16:01:48 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0x5649}, r1}}, 0x30) 16:01:48 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x4c800, &(0x7f0000000040)={0x2, 0x1, @multicast2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) sendto$inet(r0, 0x0, 0x0, 0x4c800, &(0x7f0000000040)={0x2, 0x1, @multicast2}, 0x10) (async) 16:01:48 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x3}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) 16:01:48 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0x5649}, r1}}, 0x30) 16:01:48 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x48041) 16:01:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x33c101) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x32}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x51) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x33c101) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x32}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x51) (async) 16:01:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) 16:01:48 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x3}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) 16:01:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f00000001c0)={r3, 0xffff8694}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24040001) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000ec8c19341d41d1dc2e1f01a8c92741e3ee40a6", @ANYRES16=r1, @ANYBLOB="00022dbd7000fedbdf250e00000005002e0000000000050033000700000005003300000000000500350003000000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f00000001c0)={r3, 0xffff8694}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24040001) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000ec8c19341d41d1dc2e1f01a8c92741e3ee40a6", @ANYRES16=r1, @ANYBLOB="00022dbd7000fedbdf250e00000005002e0000000000050033000700000005003300000000000500350003000000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) (async) 16:01:48 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0x5649}, r1}}, 0x30) 16:01:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) 16:01:48 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x48041) 16:01:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f00000001c0)={r3, 0xffff8694}) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24040001) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000ec8c19341d41d1dc2e1f01a8c92741e3ee40a6", @ANYRES16=r1, @ANYBLOB="00022dbd7000fedbdf250e00000005002e0000000000050033000700000005003300000000000500350003000000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) 16:01:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) 16:01:48 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x3}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x3}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) 16:01:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x33c101) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x32}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x51) 16:01:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000140), 0x4) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = socket(0x1a, 0x2, 0x8) r3 = socket(0x27, 0x80000, 0xffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2b}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 16:01:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) 16:01:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:48 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:48 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="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", 0x1000) 16:01:48 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x48041) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x48041) 16:01:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) 16:01:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000140), 0x4) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = socket(0x1a, 0x2, 0x8) (async) r3 = socket(0x27, 0x80000, 0xffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2b}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 16:01:48 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) 16:01:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000140), 0x4) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = socket(0x1a, 0x2, 0x8) r3 = socket(0x27, 0x80000, 0xffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2b}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 16:01:48 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="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", 0x1000) 16:01:48 executing program 4: r0 = socket(0x2, 0xa, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x5e, @loopback, 0x4e22, 0x3, 'nq\x00', 0x6, 0x7, 0x1}, 0x2c) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket(0x21, 0x2, 0xbd) r2 = syz_open_dev$audion(&(0x7f0000000100), 0x7fffffff, 0x2200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x400}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="100025bd7000ffdbdf252d22148bfe32467eff5886977e0420541d8b46ff4bf559676cfd0088d6d9e3000000000032c3798e2cfe3ebb00"], 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x4000800) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x8}, 0x4) 16:01:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:48 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:48 executing program 3: clock_getres(0x0, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:48 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6106}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x44000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f00000001c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x24, r4, 0x621, 0x70bd2b, 0x0, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40c0018) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1b84811}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r4, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3ff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xca}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) 16:01:48 executing program 4: r0 = socket(0x2, 0xa, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x5e, @loopback, 0x4e22, 0x3, 'nq\x00', 0x6, 0x7, 0x1}, 0x2c) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket(0x21, 0x2, 0xbd) (async) r2 = syz_open_dev$audion(&(0x7f0000000100), 0x7fffffff, 0x2200) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x400}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="100025bd7000ffdbdf252d22148bfe32467eff5886977e0420541d8b46ff4bf559676cfd0088d6d9e3000000000032c3798e2cfe3ebb00"], 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x4000800) (async) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x8}, 0x4) 16:01:48 executing program 1: r0 = socket(0x25, 0x80000, 0x1) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) 16:01:48 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) (async) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b79fed610ed51f46040a10752b4deb3b9f3d61eb064fe17648863d51932feba4b9ec8bec2dea724ea25e84ab9cf2e18fc2ccfd643486fcfc6d60ac54c2e1cf463fe4ec81fb6974ae9cb557465ff109df35694ea9f1c97f78d4cfdecb8b69fb995951609e4ec69b24847724a1cc8654c103dad5149d0d28c829174b757b2833d1553edb60e8e7c326a708817201a8dd7a1dc21193aa50c91f18f43543a05c1c864034d9c70d2ed5a2aabdc19d04e8ae8c0082c2444ba2f70c4cf1b4a931a0c2a0f6e08ad0d93647519ec9eb1dd78cb0388451d3dfe4c71628585c5e6992a7ceaa6ed159755e07d1c04f9c1f3847945d42dad4acc143bcf27f19acae3d8155acbee9f8468d2059e13e7b42539831865f09751ea3b240b9979b5d7f789a619dc3eb3a5de1a2fd5024d61d06b9849a0e03d5e4adf32d34856fd7c5f8b4b5e749b40bae96670eea7f1d5b5d475736e5dfcad367e2478fff3595d11078636058a1fb4a10a6bf1338ba5440c2c7db72d77945e76283a8ff4cedda2f65d2b5d838246a98b1808621dc3c75ee2779020cc63f31c7d8c818517eb1a73302bf90a96df8d32d231cd7c62b815c7474a95aea229beae5514c1a4bd1780250b18a0a58b1b0e37a765236658e1f10aef9c2b7d398b2eb7adf1b3eac94b56a185f3934d349e6e66c644fba116d3769679c67c94c37ee526364206f75c8fc98e3e85b6b1fdf78cda9a6cb8fbc49007c7264efe7dcdde4e4db893ba445a0c735027d4c4273b4d323fa40b242f71d0850396780307b75c63ce1f05c28275ffb19d8cfdb387c3868d98257b4b1811770e2c0361d844c6e8314babc6cf8e6bf3791578140f99e3742a38172554356651f7b99dc21ee8fae43dd9b877291c6631a319dc700186ea1c31dfed4ed6fd5e9be3c7d8de97d51cb1ab32d65aee5bba7d938e24ed3cec4ed968570abc54a13bbf36043e85905f09a76d8099672c5c98fabf930445374e6531e344337b2ea69116c9d87c8d52bd6df0572e7554c67d372b6e73ac5443733fbcc8440b9ba7b269457dc1120e0ab367b2761032f75e364623656825bd2aa6aa9537593973ee87ca49e9e42a1a9f86f078d04ce2b6910db5f400dc8641999197d9f84dabc140c7e7be819d3cc696a1aff650ba74c149127bf3330a996c6e9c2234371aab249d2862e30bc6974ef13801096aab4560376f43e09effc6de55a06a11a41feb302fa1840a0760d9ad5d82a24964b189f1607840ffcbbd91854bb4f2d722f17f869148f1787f04ea38084b37ca59802abc71ba45b59950276429f659a7f2662c4ccbdcf3ac534962aa609b3a4b76aed53f3544a4950c470bc4cba5d9196c0e8af5686fe83e3ebbcf71fc54c5f990597c6dfb13756eb9b02597dae64fa4a9e2368db6d440fe8a50fb4c850fe722d935d09d10cf9d83b8aded1b18a192f4f55851f073c0fe6beaacb2bb6bccd059339c7e0b289b9f4a7ef50cdab02aa1feb087a2161ce9efa6fee068a1bec31cc681a63f5fac0a033e600780c013cb301e5d170f70626ff5e299acd115f1220b176a6d5cb21bf9a82c614a4c4e00ef3f9dd40517fe5bfbff5ba7c53ec54c137ea85f6ca3a58489be075a3f45adc488dfd48918ccbe20d248d6035235949cf3116695320742190748a3060c02adcfcbd1c5627f0b75c4932143e1acc1ffb8e0de8af3ae2cebdb37c07cc1cb6d6244441f54839dd43964ab969c4e9a091abdc68a16e32485b411de918b581b3bc108d670f7d98d98436b59bf5936929ecd6cf797fad7803d14d96141d48cbf3e3828d3e95f89d3f2253e5c7ec387f7338d6a1258f0758ebf7e5d0cbbadfeeef1fa09c10eb3ad77079cb1b9a26912eb725f881e2b091d25dc688354154e2a9b44bc24ee8fe50a8d31e712154f710f82159b838b8db62e901e6da6b8835b5abf6a0bbc9bc7427093e14b39d64392109b64ebd4f1680fdac6cba90c11eff0383e06c856e3fd76e5fb2df46d6c483f949705ec4f747f209efdda05c09cd57be0acbe9430cf3748714056946a8bfa54699d5af3e5d0d54c70a7df32d51883c033a87b179012f282aaeede4c8d6f41d7edab68baf4e69d84161d9f34a1b5ab5249e02f54dfb09dad1862bb16fd034710904253441c40a0ca88043a1a0da10f48b95df6b8b3b6af9a5103cd08f1cd1d952def599ed3632f6ffe6f033769d2f18b1a93bc0f23433bc50ef07427ee354afa69be60ee4ecfcaaf1d19e4f2b027286c2948734d45d7c2d4eb53a3934cd452af9f15d7d9cc1c11591adb2a52a6af98f81eec9d3e4d1670730e7090822e95146e081d6ac5d89cf50adefe9f19d6d920b2871d66250676f018878cdcd882ebc8eee090efb59b73aa7f1d255ac9fe60aaa847255719a78f82dc479e7e4c65b68f6f28b1b2bfc64bd691b5ddf2629e12b86baea5eb5bd3156ea94188a63b3ec4742b85726dc73b1ebb41ff4e8452d64b669c1723493d43d4cb169cd2cbc016fa8baeb47f84bc47e11732df1fa4c42e45a64d1c92e0130fee161339837a0ebd3ef4e0e57b5dafa99241a3387def9840c249df609b519de2e2b7a30dc29877d3007f402523be79c5ad6a1ee984a485f68fc09305957f79b4cfc7942cb56d404c6f706f0ec805d044ddc2aa5528688d049ea8df5edd4e00adb56b9b3d0d0058bf257310ef526a07509606e601cdfeed8eda33135cfa077496d740a271e68b40c38942439df97cfe3331701d4e63f5603ca839f38a255d14a41b58b50c5f1c6cef3de1aa3a6cb0daa53545a16c660c14f4e911da1e82cd6f4b8d8e572597193c48d1a4c9070381b05d3b2549700d21b25d2eb4ac699c4ab4ab2885a14d1d32e1cf1e8afb231d0f98a1b3056a1476d89c5cec666c4b6303b57b8f39887335a40f40189a1fea7796d5f3d53a86bb18c65f27310f28896092fdc29c24ec8216ca7cf7829a277ac94656848076cdc09d073a2d7e62b92044788e2a635a727194aba1994d9050d558d98bba659a5f9866df7af15bb829ccf580c996f46813ae12315a5a1223d6ceb87c1163dd1569fa40446a3ba0b09da4ab519d4a8c5b15e675f5ed22d9c4acd1bde8563451866dcc56d93b67fbf56b8c1146b2c606066b60f1f732348f47c909520f1920b574638026a1c30c7835f096c7aafde115b854220ce82aba195719e78958960c40886d45c4b0f00579843be67d2898374d53acd64ce5b49e160d954d4951d62845a7a2d697e7315269b6d2108a36b718249f4d0882b33e52dc5b9f2dfe12d9f15210ef6665a84212088448c5c5c379eb528e7c1f6153f5139b6c949af727de0c8dee143b067990b86e2eb15ac3f68a2b5f9713a08c5d1e24b91d1738a500c07f31a629822668c9f74f8abcf3c57be979d078d3d312758cb9e64c9da51aa52a5bd897a0919dba721c93e1946210565f042b70133c82c8177aaae0d5b15315173aa49b34aa9b0bec6ce36cda325127ad160bf5a31339a725aae85af43381f19b9098a05b93d97efbc0ed6e96a65762acde9c40b170907f60f88f99255300cefb93f80bba1220ea7704fd3ca413eefdef7d5cf30a53d115747947bd2225636b6bd9b75a9200cbad225cd80987ca9a5df5f170faa3f1e2f4c67f3413e13ed164dbec5dc5fbb304a7b82764b67a11eb6d6e578fa946867f91e113c6c18b4c577610b500ac0e894123a113d847c620d5abc306822f3b317df838af335941ce5a5ca84d20c9bb8a7928b9fa9b15688a4c6a7c4fb8ca195f3625b8e2815f65248a9b6fcea46733ec99619ccdb91ed60e480877c680c519b76c1ab1f4b6cb6c5db866dadf7af940b033ccf585dd64112a29e13f8a85271cd9564c953a0d4442231bece202a05b9e19e2a4a881531217f9b45b888008ac4e7dc523c90df4b42d5f1278c679e3f64b01b4fabb11a91d4dd0a49e1977ff1df230180e1d40d99a0e61fc453240f3babf512d1c7d706eb339337c163161d012cb93f80de1a1a49112e9c9b38eab75e48acaa3b6014ea534aab8e9df55f194a1f7f89b3f51c17e8eadf36a8169beeffcff0b376fa76a97f2b7f874ffad6e08bd724b7ef5b1b7117d851f82bbd418ae3505c318af4aa2660569dc050164ccdc7dc24e4db77b96562a4356ad165bde50a8208f077847b166da252af7f486c25d2076a5308e85382a5db9cd262614f5b4a4f02020fcc310236816205442923a768e99dd0d41f1aea2f49cc62afa607120beb943321033e4b4ba38079ef556b27b743ea08f7f6e8ecdf0c7329edeb76117a94dec3847406cef89263da5718ce1fa0722ddc9dc7566028ecea0e5cbd8ce1333b89d3c046b00bda3dc6f89995b4e36a6dde90852b765db52e6cb2507b6ca123ba69502f3decf004b477a4c76821afc27651b4a04ae90d7da87ab87d5635e0d5ec418e312345efe22a29cf15a0eb6a1ea40c010bbd8ff17ba281b63e0c954c8aace3df8915289c0a9482f7d78ad55035226f8c7df1e8eb657443b30e0fdc292d820d6f5f5dee04cc04c3ec41b7deb87972ea020f89c0e82e2267ca118a9976e5ba9b7c8e1a26d8ff07e9f78e92ca724efd66e1869ac06697536707cfc9fc2f4321902f5b74c9cc41b7ee920a73a294b4a1dff68eaf2c53429eeb2a2fec40b19af60d8122c3d27ad93ff0f4b06a538263150a9f6fa4c07384be6dea4805107db4ab756aabf6242ca13b8f89225465de5300d0ed9d13e6844ffc6e84c7bac0ba9d4b0b09da0d41a77f34cab16bd87bf7660b97bc8dbf1c3833d9a59e302f0761147291a15f51657ae25ab3c39915d526c0f8edc1700530de90c84aed233aaf261514b7ddc9e3c47a250fd94319552a977843ec64bea42f72ae38311e2fc2423399e1cdaaed92dc3c351103e1a96e292649ad0cc0647c75d6eeac3b6b02dca5dd876a2660fd85324013aea9b7c5e86b244d0a728ad8aa8c3eb150ff14b4cf1dadc2aa2ef1d630c121bd3414b71d1c96c30c67056ba614d92c707722bff7c759ac16bc91567b09c699f6954e6b729b1113b9044a166a764577557511525500c59dd265181a6ca0a6f7f4e7c4b2136bad7967517c4a89c6e053766d9d3e2f2a6771c9e734f2f1db5e3227cf755eda33e178fd885303ffc3f920b3f25eb79ce1eaf68b44ce1b31948e15ca97b3fdb7ff4fa8d3414f2f68b5b18e67cc690f8025f6086249cbad0820110a1b56c1e383d71e1a93f4a43c0940407aa991c12abf86f64d52e1941ba1aa94332625ddf887517104a9eb966df5d6a059e4afc98037de4efe128a3b3ee3aa6c5700177b510cee47c481936c321e8c76aee29564e8c35b34f5d031eafba0014696d33447d79f892052d03237ace2bf1b269601e822c7f946c44619d665c99519a53033636376d680d31e00bfa0df3cf2f4bb5e6060f60b12f6ce5481d830914e457f3e6ca0e52072139a38479eb42c073d4b5bee947b0f9bf09af780d8be5392210b6400a8b2d2be1b12a8dec2a21e2fa1d113f9a54b1be47c6e0a0a76c6d13dd360a4e70f21f0644d0c96e33dbff10713d43881fb03c77d035449abfb258de253c9f7568b64e6044a08333669c0eea560068ada899d4392bb659ffd7f4a4ae7c0af73432c023a7d5d58e99d21dabee3c80cccc40e288fb286773b8df6bf5a5082b3987362950d040ef6004cab441488fc204a049f8bbc155dd838713615e3079bbdbcd87e3eedf2ac38bc95a89fcf73f4ce04537799e1bdba349ddd243ebefb503799e29190f0208f7153da3be13e6b07516c9f66401cb3073d4561bc25127c05a265152548612f5f0140df5982", 0x1000) 16:01:48 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f0000000400), r3}}, 0x18) 16:01:48 executing program 1: r0 = socket(0x25, 0x80000, 0x1) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) 16:01:48 executing program 3: clock_getres(0x0, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:48 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6106}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x44000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f00000001c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x24, r4, 0x621, 0x70bd2b, 0x0, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40c0018) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1b84811}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r4, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3ff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xca}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6106}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x44000) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f00000001c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x24, r4, 0x621, 0x70bd2b, 0x0, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40c0018) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1b84811}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r4, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3ff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xca}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) (async) 16:01:48 executing program 4: socket(0x2, 0xa, 0x0) (async) r0 = socket(0x2, 0xa, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x5e, @loopback, 0x4e22, 0x3, 'nq\x00', 0x6, 0x7, 0x1}, 0x2c) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket(0x21, 0x2, 0xbd) r2 = syz_open_dev$audion(&(0x7f0000000100), 0x7fffffff, 0x2200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x400}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x400}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="100025bd7000ffdbdf252d22148bfe32467eff5886977e0420541d8b46ff4bf559676cfd0088d6d9e3000000000032c3798e2cfe3ebb00"], 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x4000800) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x8}, 0x4) (async) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x8}, 0x4) 16:01:48 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x111, 0x6}}, 0x20) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000003c0), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r2) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022cbd7000fefbdf25010000000306000a000300000005000700080001000700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40081}, 0x500c1) 16:01:48 executing program 1: r0 = socket(0x25, 0x80000, 0x1) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) 16:01:48 executing program 3: clock_getres(0x0, &(0x7f0000000000)) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:48 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r2, 0x0, 0x2, 0x4}}, 0x20) r3 = syz_open_dev$audion(&(0x7f0000000040), 0x10001, 0x2c0040) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf250800000008001700", @ANYRES32=r3, @ANYBLOB="0c000f00010000000100000008000a0002000000080011000100000005000d0001000000fcff0b000000000006001c0000fc00000c000f000000008000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x20024801) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008838}, 0x0) 16:01:48 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f0000000400), r3}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f0000000400), r3}}, 0x18) (async) 16:01:48 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x111, 0x6}}, 0x20) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000003c0), r1, 0x0, 0x1, 0x4}}, 0x20) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r2) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022cbd7000fefbdf25010000000306000a000300000005000700080001000700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40081}, 0x500c1) 16:01:48 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6106}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x44000) (async) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6106}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x44000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f00000001c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x24, r4, 0x621, 0x70bd2b, 0x0, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40c0018) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f00000001c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x24, r4, 0x621, 0x70bd2b, 0x0, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40c0018) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1b84811}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r4, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3ff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xca}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) 16:01:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffbff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004805}, 0x82) 16:01:48 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r2, 0x0, 0x2, 0x4}}, 0x20) r3 = syz_open_dev$audion(&(0x7f0000000040), 0x10001, 0x2c0040) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf250800000008001700", @ANYRES32=r3, @ANYBLOB="0c000f00010000000100000008000a0002000000080011000100000005000d0001000000fcff0b000000000006001c0000fc00000c000f000000008000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x20024801) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r3) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008838}, 0x0) 16:01:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20040001) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) 16:01:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44080}, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r5, 0x1}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x44, r7, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r5, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x93c}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048000) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000001e40), 0x2, 0x0) setsockopt$ax25_int(r8, 0x101, 0x3, &(0x7f0000000380)=0x4, 0x4) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffa}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x24004080) 16:01:48 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f0000000400), r3}}, 0x18) 16:01:48 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x111, 0x6}}, 0x20) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000003c0), r1, 0x0, 0x1, 0x4}}, 0x20) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r2) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022cbd7000fefbdf25010000000306000a000300000005000700080001000700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40081}, 0x500c1) 16:01:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffbff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004805}, 0x82) 16:01:48 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r2, 0x0, 0x2, 0x4}}, 0x20) r3 = syz_open_dev$audion(&(0x7f0000000040), 0x10001, 0x2c0040) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf250800000008001700", @ANYRES32=r3, @ANYBLOB="0c000f00010000000100000008000a0002000000080011000100000005000d0001000000fcff0b000000000006001c0000fc00000c000f000000008000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x20024801) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008838}, 0x0) socket(0x2, 0xa, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240), 0x111, 0x5}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r2, 0x0, 0x2, 0x4}}, 0x20) (async) syz_open_dev$audion(&(0x7f0000000040), 0x10001, 0x2c0040) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf250800000008001700", @ANYRES32=r3, @ANYBLOB="0c000f00010000000100000008000a0002000000080011000100000005000d0001000000fcff0b000000000006001c0000fc00000c000f000000008000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x20024801) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r3) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008838}, 0x0) (async) 16:01:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44080}, 0x14) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x44, r7, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r5, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x93c}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048000) (async) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000001e40), 0x2, 0x0) (async) setsockopt$ax25_int(r8, 0x101, 0x3, &(0x7f0000000380)=0x4, 0x4) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffa}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x24004080) 16:01:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20040001) (async, rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) 16:01:49 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="e19987511ddff1661b006834030f4f676e99e83b804e844e5c63a6975116248529a927456fbf73001fd01c5133fdad15273277850826ffc9dbeea43090dd1777396b261afcc9ba63f4ef7251c659368ba1ba5115497bdcb05488f320c7e1b418ca7afa8a0063e09bda78d614afe4", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdf25010000000800390000000000"], 0x1c}}, 0x4000000) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='oom_score_adj_update\x00', r2}, 0x10) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000240)=0x2, r5, 0x0, 0x0, 0x1}}, 0x20) 16:01:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffbff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004805}, 0x82) 16:01:49 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x8000, 0x800) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @in={0x2, 0x4e21, @remote}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:49 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7000ffdbdf250200000005000d00000000007a604f06b8e20000000000000500140000000000060002000000000006001c00015754dfe1071ebe7a51b9d6be10b1f5f8b3f567b1148610b478499f1f51d2680ff8978fae837f20ecb6e1db05fa539c2d26d1badbcfd479379e18c873389f556bc200"/135, @ANYRES32=r4, @ANYBLOB="050022000100000006000e0094080000"], 0x60}}, 0x4000040) 16:01:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20040001) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) 16:01:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in6={0xa, 0x4e22, 0x1000, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x90) 16:01:49 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="e19987511ddff1661b006834030f4f676e99e83b804e844e5c63a6975116248529a927456fbf73001fd01c5133fdad15273277850826ffc9dbeea43090dd1777396b261afcc9ba63f4ef7251c659368ba1ba5115497bdcb05488f320c7e1b418ca7afa8a0063e09bda78d614afe4", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdf25010000000800390000000000"], 0x1c}}, 0x4000000) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) (async, rerun: 64) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x10) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r3) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='oom_score_adj_update\x00', r2}, 0x10) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000240)=0x2, r5, 0x0, 0x0, 0x1}}, 0x20) 16:01:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44080}, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r5, 0x1}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x44, r7, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r5, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x93c}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048000) (async) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000001e40), 0x2, 0x0) setsockopt$ax25_int(r8, 0x101, 0x3, &(0x7f0000000380)=0x4, 0x4) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffa}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x24004080) 16:01:49 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x8000, 0x800) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @in={0x2, 0x4e21, @remote}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:49 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7000ffdbdf250200000005000d00000000007a604f06b8e20000000000000500140000000000060002000000000006001c00015754dfe1071ebe7a51b9d6be10b1f5f8b3f567b1148610b478499f1f51d2680ff8978fae837f20ecb6e1db05fa539c2d26d1badbcfd479379e18c873389f556bc200"/135, @ANYRES32=r4, @ANYBLOB="050022000100000006000e0094080000"], 0x60}}, 0x4000040) socket(0x2, 0xa, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7000ffdbdf250200000005000d00000000007a604f06b8e20000000000000500140000000000060002000000000006001c00015754dfe1071ebe7a51b9d6be10b1f5f8b3f567b1148610b478499f1f51d2680ff8978fae837f20ecb6e1db05fa539c2d26d1badbcfd479379e18c873389f556bc200"/135, @ANYRES32=r4, @ANYBLOB="050022000100000006000e0094080000"], 0x60}}, 0x4000040) (async) 16:01:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a50}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x3c}}, 0x20000800) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in6={0xa, 0x4e22, 0x1000, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in6={0xa, 0x4e22, 0x1000, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x90) (async) 16:01:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a50}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x3c}}, 0x20000800) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:49 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="e19987511ddff1661b006834030f4f676e99e83b804e844e5c63a6975116248529a927456fbf73001fd01c5133fdad15273277850826ffc9dbeea43090dd1777396b261afcc9ba63f4ef7251c659368ba1ba5115497bdcb05488f320c7e1b418ca7afa8a0063e09bda78d614afe4", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdf25010000000800390000000000"], 0x1c}}, 0x4000000) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r3) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='oom_score_adj_update\x00', r2}, 0x10) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000240)=0x2, r5, 0x0, 0x0, 0x1}}, 0x20) 16:01:49 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_OFFSET={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'tunl0\x00', r6, 0x10, 0x1, 0x2, 0x1b, {{0x17, 0x4, 0x1, 0x17, 0x5c, 0x68, 0x0, 0x96, 0x2f, 0x0, @multicast2, @empty, {[@timestamp_prespec={0x44, 0x4, 0xf7, 0x3, 0x4}, @ra={0x94, 0x4}, @generic={0x86, 0xb, "b31b29c9ea027b66bb"}, @timestamp_addr={0x44, 0x34, 0xdd, 0x1, 0x2, [{@broadcast}, {@rand_addr=0x64010101, 0x6}, {@empty, 0xfff}, {@multicast1, 0x7f2a2d8d}, {@private=0xa010102, 0x3}, {@remote, 0x8}]}, @noop]}}}}}) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) 16:01:49 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7000ffdbdf250200000005000d00000000007a604f06b8e20000000000000500140000000000060002000000000006001c00015754dfe1071ebe7a51b9d6be10b1f5f8b3f567b1148610b478499f1f51d2680ff8978fae837f20ecb6e1db05fa539c2d26d1badbcfd479379e18c873389f556bc200"/135, @ANYRES32=r4, @ANYBLOB="050022000100000006000e0094080000"], 0x60}}, 0x4000040) 16:01:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in6={0xa, 0x4e22, 0x1000, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x90) 16:01:49 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x8000, 0x800) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @in={0x2, 0x4e21, @remote}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:49 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_OFFSET={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'tunl0\x00', r6, 0x10, 0x1, 0x2, 0x1b, {{0x17, 0x4, 0x1, 0x17, 0x5c, 0x68, 0x0, 0x96, 0x2f, 0x0, @multicast2, @empty, {[@timestamp_prespec={0x44, 0x4, 0xf7, 0x3, 0x4}, @ra={0x94, 0x4}, @generic={0x86, 0xb, "b31b29c9ea027b66bb"}, @timestamp_addr={0x44, 0x34, 0xdd, 0x1, 0x2, [{@broadcast}, {@rand_addr=0x64010101, 0x6}, {@empty, 0xfff}, {@multicast1, 0x7f2a2d8d}, {@private=0xa010102, 0x3}, {@remote, 0x8}]}, @noop]}}}}}) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) 16:01:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a50}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x3c}}, 0x20000800) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:49 executing program 4: r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{}, [@default, @netrom, @remote, @bcast, @null, @netrom, @remote, @null]}, &(0x7f0000000100)=0x48, 0x80000) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000140)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000180)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r2 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:49 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r5}}, 0x18) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r7}}, 0x18) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000003c0)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) 16:01:49 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty, 0x62b6}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 16:01:49 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {r2, 0x80, "a7c7f3", "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"}}, 0x110) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r3) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:49 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_OFFSET={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) (async, rerun: 32) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'tunl0\x00', r6, 0x10, 0x1, 0x2, 0x1b, {{0x17, 0x4, 0x1, 0x17, 0x5c, 0x68, 0x0, 0x96, 0x2f, 0x0, @multicast2, @empty, {[@timestamp_prespec={0x44, 0x4, 0xf7, 0x3, 0x4}, @ra={0x94, 0x4}, @generic={0x86, 0xb, "b31b29c9ea027b66bb"}, @timestamp_addr={0x44, 0x34, 0xdd, 0x1, 0x2, [{@broadcast}, {@rand_addr=0x64010101, 0x6}, {@empty, 0xfff}, {@multicast1, 0x7f2a2d8d}, {@private=0xa010102, 0x3}, {@remote, 0x8}]}, @noop]}}}}}) (async, rerun: 64) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) 16:01:49 executing program 4: accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{}, [@default, @netrom, @remote, @bcast, @null, @netrom, @remote, @null]}, &(0x7f0000000100)=0x48, 0x80000) (async) r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{}, [@default, @netrom, @remote, @bcast, @null, @netrom, @remote, @null]}, &(0x7f0000000100)=0x48, 0x80000) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000140)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000180)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r2 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:49 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty, 0x62b6}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 16:01:49 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) (async) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {r2, 0x80, "a7c7f3", "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"}}, 0x110) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r3) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:49 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r5}}, 0x18) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r7}}, 0x18) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000003c0)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r5}}, 0x18) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r7}}, 0x18) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000001e40), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000003c0)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) (async) 16:01:49 executing program 4: r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{}, [@default, @netrom, @remote, @bcast, @null, @netrom, @remote, @null]}, &(0x7f0000000100)=0x48, 0x80000) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000140)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000180)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r2 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{}, [@default, @netrom, @remote, @bcast, @null, @netrom, @remote, @null]}, &(0x7f0000000100)=0x48, 0x80000) (async) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000140)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000180)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) socket(0x2, 0xa, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) 16:01:49 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty, 0x62b6}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 16:01:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 16:01:49 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {r2, 0x80, "a7c7f3", "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"}}, 0x110) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r3) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) (async) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {r2, 0x80, "a7c7f3", "ef084ac48c17ffab3a4d88def591a04e8e623b1d36b98561d44bc21ec2ecf2e1d446c336e90321118663f26fc120aafa79e06979962f7bbfd13f685843e388a39dec4fbc89981599eb2f73d84b22a958cdc475caad606ad4fb6666dc6b512183cb2be66f0aad9b662654bd90014ea07d8f0b0aecbbd1770011cf01848d0c3e458b50adbef48e15a12533e07a819f8d787f449bcf7159ef8602886b0c75f5efdc100632b911db2ea8fb252bb6b5fa63f5d73a78409ed0bb206388994bf2dfed97f501f5e216f9f3913c2dfc3d8322bca79b68359543167308f3d92730877a2bc099c6db3de852b23aeb8d32e743f18d53debda9f5638cd22179a5ca03d810f2d5"}}, 0x110) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r3) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) 16:01:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 16:01:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40044) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x3f}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="004a4cbea8222322cfe50800"], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x2400c000) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0x1}) 16:01:49 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000240)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x0, r5}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x1867603a97be6673, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x4008000) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000021c}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc040}, 0x44012) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0xe8, 0xe8, 0x338, 0xe8, 0xe8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000080), {[{{@ip={@rand_addr=0x64010100, @empty, 0xff, 0xff, 'bridge_slave_0\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x5c, 0x1, 0x50}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x1, 0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xffffffff, 0xffffff00, 'rose0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x11}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@ah={{0x30}, {[0xffffffff, 0xfffffffd]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x1, @broadcast, 0x4e21}}}, {{@ip={@broadcast, @rand_addr=0x64010102, 0x0, 0xff, 'nr0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x5fb918c7a0841560}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x5}}}, {{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'macvlan1\x00', '\x00', {0xff}, {}, 0x0, 0x1, 0x8}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffff8, 0xfffffeff, @dev={0xac, 0x14, 0x14, 0x3f}, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 16:01:49 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r5}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r7}}, 0x18) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000001e40), 0x2, 0x0) (async) openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000003c0)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) 16:01:49 executing program 5: r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x440c0}, 0x4004851) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) 16:01:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) 16:01:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40044) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x3f}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="004a4cbea8222322cfe50800"], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x2400c000) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0x1}) 16:01:49 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000240)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x0, r5}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x1867603a97be6673, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x4008000) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket(0x2, 0xa, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000240)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x0, r5}) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x1867603a97be6673, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x4008000) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) 16:01:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000021c}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc040}, 0x44012) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0xe8, 0xe8, 0x338, 0xe8, 0xe8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000080), {[{{@ip={@rand_addr=0x64010100, @empty, 0xff, 0xff, 'bridge_slave_0\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x5c, 0x1, 0x50}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x1, 0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xffffffff, 0xffffff00, 'rose0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x11}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@ah={{0x30}, {[0xffffffff, 0xfffffffd]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x1, @broadcast, 0x4e21}}}, {{@ip={@broadcast, @rand_addr=0x64010102, 0x0, 0xff, 'nr0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x5fb918c7a0841560}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x5}}}, {{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'macvlan1\x00', '\x00', {0xff}, {}, 0x0, 0x1, 0x8}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffff8, 0xfffffeff, @dev={0xac, 0x14, 0x14, 0x3f}, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 16:01:49 executing program 5: r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x440c0}, 0x4004851) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) [ 1452.041735] ipt_ECN: cannot use TCP operations on a non-tcp rule 16:01:49 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x58}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 16:01:49 executing program 4: r0 = socket(0x2, 0xa, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000240)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x0, r5}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x1867603a97be6673, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x4008000) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000021c}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc040}, 0x44012) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0xe8, 0xe8, 0x338, 0xe8, 0xe8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000080), {[{{@ip={@rand_addr=0x64010100, @empty, 0xff, 0xff, 'bridge_slave_0\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x5c, 0x1, 0x50}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x1, 0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xffffffff, 0xffffff00, 'rose0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x11}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@ah={{0x30}, {[0xffffffff, 0xfffffffd]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x1, @broadcast, 0x4e21}}}, {{@ip={@broadcast, @rand_addr=0x64010102, 0x0, 0xff, 'nr0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x5fb918c7a0841560}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x5}}}, {{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'macvlan1\x00', '\x00', {0xff}, {}, 0x0, 0x1, 0x8}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffff8, 0xfffffeff, @dev={0xac, 0x14, 0x14, 0x3f}, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 16:01:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40044) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x3f}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="004a4cbea8222322cfe50800"], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x2400c000) (async) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0x1}) 16:01:49 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$midi(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0x0, 0x4000]}, {0x0, 0x0, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3]}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 1452.110931] ipt_ECN: cannot use TCP operations on a non-tcp rule 16:01:49 executing program 5: r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x440c0}, 0x4004851) (async) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x440c0}, 0x4004851) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r2}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) 16:01:49 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x58}}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) 16:01:49 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x0, [0x80000000, 0xc892, 0x8000]}, &(0x7f0000000100)=0x44) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0xfbccbc76e43ff738) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044003}, 0x80) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000200)={&(0x7f0000000140)="abf1cc978e0be134b3f53fc9648e174fed6293776dbb67c353f63829d064c54a3f2dd1f93d650d1ee1af031e980dbc7d25081cd74550f1df1d6d5a17afe5316e96e66b81e6fa89fc7d02df6f5dd42292f96819e9f05b2b1c866db90ea42dcc7462933b4ddedfd30e88c0dc8dfdce6bd759c69b95dfddc2becccb97b8fbcda8d4613b4eb8648f064215a954723aaf8e99f2d445814913124812009953c23dcd89b210f4a8d18ecbfea92be7", 0xab}) 16:01:49 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080), 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r3, 0x7}) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0xfbccbc76e43ff738) (async) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044003}, 0x80) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000200)={&(0x7f0000000140)="abf1cc978e0be134b3f53fc9648e174fed6293776dbb67c353f63829d064c54a3f2dd1f93d650d1ee1af031e980dbc7d25081cd74550f1df1d6d5a17afe5316e96e66b81e6fa89fc7d02df6f5dd42292f96819e9f05b2b1c866db90ea42dcc7462933b4ddedfd30e88c0dc8dfdce6bd759c69b95dfddc2becccb97b8fbcda8d4613b4eb8648f064215a954723aaf8e99f2d445814913124812009953c23dcd89b210f4a8d18ecbfea92be7", 0xab}) [ 1452.206406] ipt_ECN: cannot use TCP operations on a non-tcp rule 16:01:49 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$midi(r2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0x0, 0x4000]}, {0x0, 0x0, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3]}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:50 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r3, 0xd2, "3267f6", "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"}}, 0x110) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x5f12, @empty}, {0xa, 0x0, 0x2, @empty}, r1}}, 0x48) r4 = syz_open_dev$audion(&(0x7f0000000000), 0x40, 0x129200) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r1, r5}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:50 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080), 0x2, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r3, 0x7}) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:50 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x0, [0x80000000, 0xc892, 0x8000]}, &(0x7f0000000100)=0x44) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 32) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0xfbccbc76e43ff738) (rerun: 32) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044003}, 0x80) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000200)={&(0x7f0000000140)="abf1cc978e0be134b3f53fc9648e174fed6293776dbb67c353f63829d064c54a3f2dd1f93d650d1ee1af031e980dbc7d25081cd74550f1df1d6d5a17afe5316e96e66b81e6fa89fc7d02df6f5dd42292f96819e9f05b2b1c866db90ea42dcc7462933b4ddedfd30e88c0dc8dfdce6bd759c69b95dfddc2becccb97b8fbcda8d4613b4eb8648f064215a954723aaf8e99f2d445814913124812009953c23dcd89b210f4a8d18ecbfea92be7", 0xab}) 16:01:50 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x58}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 16:01:50 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r3, 0x7}) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:50 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$midi(r2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0x0, 0x4000]}, {0x0, 0x0, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3]}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:50 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r3, 0xd2, "3267f6", "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"}}, 0x110) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x5f12, @empty}, {0xa, 0x0, 0x2, @empty}, r1}}, 0x48) (async) r4 = syz_open_dev$audion(&(0x7f0000000000), 0x40, 0x129200) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r1, r5}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:50 executing program 4: r0 = socket(0x2, 0xa, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x0, [0x80000000, 0xc892, 0x8000]}, &(0x7f0000000100)=0x44) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$inet(r0, 0x0, 0x0, 0x4000, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0xffffffcb) 16:01:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) socketpair(0x10, 0x80000, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f00000001c0)={'ah\x00'}, &(0x7f0000000200)=0x1e) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042dbd7000ffdbdf2501000000050038000000000008003c00e800000005003500040000000a00090000000000000000000500290001000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000042}, 0x8000) socketpair(0xf9e17221c00d91e, 0x80000, 0x2, &(0x7f0000000180)) 16:01:50 executing program 4: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r0, 0x8}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x3ff}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'virt_wifi0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004002}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x80000000]}, {}], r3, 0x1, 0x1, 0x90}}, 0x20) 16:01:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$inet(r0, 0x0, 0x0, 0x4000, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0xffffffcb) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) sendto$inet(r0, 0x0, 0x0, 0x4000, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0xffffffcb) (async) 16:01:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) socketpair(0x10, 0x80000, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f00000001c0)={'ah\x00'}, &(0x7f0000000200)=0x1e) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f00000001c0)={'ah\x00'}, &(0x7f0000000200)=0x1e) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042dbd7000ffdbdf2501000000050038000000000008003c00e800000005003500040000000a00090000000000000000000500290001000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000042}, 0x8000) socketpair(0xf9e17221c00d91e, 0x80000, 0x2, &(0x7f0000000180)) (async) socketpair(0xf9e17221c00d91e, 0x80000, 0x2, &(0x7f0000000180)) 16:01:50 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r3, 0xd2, "3267f6", "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"}}, 0x110) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x5f12, @empty}, {0xa, 0x0, 0x2, @empty}, r1}}, 0x48) (async) r4 = syz_open_dev$audion(&(0x7f0000000000), 0x40, 0x129200) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r1, r5}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:50 executing program 4: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r0, 0x8}) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x3ff}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'virt_wifi0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004002}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x80000000]}, {}], r3, 0x1, 0x1, 0x90}}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x80000000]}, {}], r3, 0x1, 0x1, 0x90}}, 0x20) (async) 16:01:50 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$inet(r0, 0x0, 0x0, 0x4000, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0xffffffcb) 16:01:50 executing program 4: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r0, 0x8}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket(0x2, 0xa, 0x0) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r0, 0x8}) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) 16:01:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000080)={0x52c, {{0x2, 0x4e24, @loopback}}, 0x3, 0x7, [{{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e22, @rand_addr=0x64010100}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e22, @rand_addr=0x64010102}}, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e20, @broadcast}}]}, 0x410) 16:01:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x3ff}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'virt_wifi0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004002}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x3ff}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'virt_wifi0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004002}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) socketpair(0x10, 0x80000, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f00000001c0)={'ah\x00'}, &(0x7f0000000200)=0x1e) (async) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042dbd7000ffdbdf2501000000050038000000000008003c00e800000005003500040000000a00090000000000000000000500290001000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000042}, 0x8000) (async) socketpair(0xf9e17221c00d91e, 0x80000, 0x2, &(0x7f0000000180)) 16:01:50 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10}, 0x18) 16:01:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000080)={0x52c, {{0x2, 0x4e24, @loopback}}, 0x3, 0x7, [{{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e22, @rand_addr=0x64010100}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e22, @rand_addr=0x64010102}}, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e20, @broadcast}}]}, 0x410) socket$inet_udp(0x2, 0x2, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000080)={0x52c, {{0x2, 0x4e24, @loopback}}, 0x3, 0x7, [{{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e22, @rand_addr=0x64010100}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e22, @rand_addr=0x64010102}}, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e20, @broadcast}}]}, 0x410) (async) 16:01:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x80000000]}, {}], r3, 0x1, 0x1, 0x90}}, 0x20) 16:01:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r1) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x9d}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x40) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000000), &(0x7f00000001c0)=0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000080)={0x2, {{0x2, 0x4e21, @multicast1}}, 0x1, 0x1, [{{0x2, 0x4e20, @empty}}]}, 0x110) 16:01:50 executing program 2: sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="7fa2c599807b065da0ef53b89030eea9dc7f37ceecc6a77921b458d4652e0fcc02", 0x21, 0x40040, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) 16:01:50 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async, rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) (async, rerun: 32) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10}, 0x18) 16:01:50 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x80000001, 0x1a5480) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffe085}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) 16:01:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000080)={0x52c, {{0x2, 0x4e24, @loopback}}, 0x3, 0x7, [{{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e22, @rand_addr=0x64010100}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e22, @rand_addr=0x64010102}}, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e20, @broadcast}}]}, 0x410) 16:01:50 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) socketpair(0x6, 0x2, 0x1, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000640)={0x9, 0x108, 0xfa00, {r1, 0x3f, "253002", "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"}}, 0x110) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000200)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f00000007c0)={0x6, 0x118, 0xfa00, {{0x9, 0x40, "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", 0x2, 0x2, 0x92, 0xff, 0x2, 0x0, 0x4}, r1}}, 0x120) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000600)='cpu.pressure\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000980)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @remote, 0x40}, r7}}, 0x30) 16:01:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r1) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x9d}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x40) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000000), &(0x7f00000001c0)=0x4) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) (async, rerun: 64) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000080)={0x2, {{0x2, 0x4e21, @multicast1}}, 0x1, 0x1, [{{0x2, 0x4e20, @empty}}]}, 0x110) (rerun: 64) 16:01:50 executing program 2: sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="7fa2c599807b065da0ef53b89030eea9dc7f37ceecc6a77921b458d4652e0fcc02", 0x21, 0x40040, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) 16:01:50 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x80000001, 0x1a5480) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffe085}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) 16:01:50 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10}, 0x18) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10}, 0x18) 16:01:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r1) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x9d}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x40) (async) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000000), &(0x7f00000001c0)=0x4) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) (async, rerun: 32) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000080)={0x2, {{0x2, 0x4e21, @multicast1}}, 0x1, 0x1, [{{0x2, 0x4e20, @empty}}]}, 0x110) (rerun: 32) 16:01:50 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="000100000000000002004e22ffffffff000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000400000002004e24ac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac14143100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2464010101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000668da1616f"], 0x290) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:50 executing program 2: sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="7fa2c599807b065da0ef53b89030eea9dc7f37ceecc6a77921b458d4652e0fcc02", 0x21, 0x40040, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="7fa2c599807b065da0ef53b89030eea9dc7f37ceecc6a77921b458d4652e0fcc02", 0x21, 0x40040, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) (async) 16:01:50 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) (async) socketpair(0x6, 0x2, 0x1, &(0x7f00000001c0)={0xffffffffffffffff}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001e40), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000640)={0x9, 0x108, 0xfa00, {r1, 0x3f, "253002", "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"}}, 0x110) (async) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000200)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f00000007c0)={0x6, 0x118, 0xfa00, {{0x9, 0x40, "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", 0x2, 0x2, 0x92, 0xff, 0x2, 0x0, 0x4}, r1}}, 0x120) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000600)='cpu.pressure\x00', 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000980)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @remote, 0x40}, r7}}, 0x30) 16:01:50 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:50 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x80000001, 0x1a5480) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffe085}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) 16:01:50 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="000100000000000002004e22ffffffff000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000400000002004e24ac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac14143100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2464010101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000668da1616f"], 0x290) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000180)={r1, 0x5}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) write$midi(0xffffffffffffffff, &(0x7f0000000080)="aa0275d81e2a06907392e64ebf5937b7f1678d7547f596c1029a7a2c79c9ff56f179d6bf353a49c2198101b99a7f8515b55641192c4c2688ba7c794d404622430f56340d1a5591002dca2471096486c45a149344beeb1e28e6879e113210d7eea662ad0d27f36a762f1e70888731e9665e7bf0197f49f0fef8e649365eb3bdac98ef803bc2fc41351976089d3d7456723350c5f2c58c4044f3276dd81d57b69b654f20e3b21926d15df4c456021c0253b88518f0f6744359540c98205e16522529b506029e0f25fac7280b0744223636239d36fac382957aaf173b5836", 0xdd) sendto$inet(r0, &(0x7f00000001c0)="c909b9a30342015b7f8f54a33222b97821a2df361f9c59f46e2480ab51ed7fc1c29e78c40d27066637fe691ceb5a3dd5910ffe859b87b5656c2a965bf42c1fe74431f2e573603955b352c171012edf722bf833210bbbcb6d27fbc9949937ec1ea8d92d20be590377208b63fa5f2bbef81e926abcc0407252747fe4579d594657c67a203df5ef785c092e3ec05b9489f0c36edc4f712135ef1eaeb027c53cd8e68b889837196bfa6514c86edb5f1e61843d3e1114a26cce158e7d71813947", 0xbe, 0x84004, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) 16:01:50 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x10}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000e143e6e5bca304edf279c1d4d78978a086b95cb076cd34f9e2e38cffe6ffd806c1c6ef0181f2fb1adc26d67797325da11acb0cd754b5247113900a11aad984e5e214cac73edbc16711c817b5bb0b3c87b02a91446be56de15f9dfb0d65c24033c495b5c8677e5fc69ea64aac8857e8ec283cddd143912eac94f5bd1fb278bf41d4d2b4722296a31fc40540cba174e4df269718bda5d4308fc6de1f8cd313e14992e8ff1c994a571b51b0b2ab64aebf9bab30f62528150411bdce2751d4cee3cca106499dafb37595c126a8e5b30c9ba21be4a7"], 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) 16:01:50 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) (async) socketpair(0x6, 0x2, 0x1, &(0x7f00000001c0)={0xffffffffffffffff}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000640)={0x9, 0x108, 0xfa00, {r1, 0x3f, "253002", "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"}}, 0x110) (async) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000200)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f00000007c0)={0x6, 0x118, 0xfa00, {{0x9, 0x40, "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", 0x2, 0x2, 0x92, 0xff, 0x2, 0x0, 0x4}, r1}}, 0x120) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000600)='cpu.pressure\x00', 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000980)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @remote, 0x40}, r7}}, 0x30) 16:01:50 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="000100000000000002004e22ffffffff000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000400000002004e24ac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac14143100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2464010101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000668da1616f"], 0x290) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000000)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000180)={r1, 0x5}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async, rerun: 32) write$midi(0xffffffffffffffff, &(0x7f0000000080)="aa0275d81e2a06907392e64ebf5937b7f1678d7547f596c1029a7a2c79c9ff56f179d6bf353a49c2198101b99a7f8515b55641192c4c2688ba7c794d404622430f56340d1a5591002dca2471096486c45a149344beeb1e28e6879e113210d7eea662ad0d27f36a762f1e70888731e9665e7bf0197f49f0fef8e649365eb3bdac98ef803bc2fc41351976089d3d7456723350c5f2c58c4044f3276dd81d57b69b654f20e3b21926d15df4c456021c0253b88518f0f6744359540c98205e16522529b506029e0f25fac7280b0744223636239d36fac382957aaf173b5836", 0xdd) (async, rerun: 32) sendto$inet(r0, &(0x7f00000001c0)="c909b9a30342015b7f8f54a33222b97821a2df361f9c59f46e2480ab51ed7fc1c29e78c40d27066637fe691ceb5a3dd5910ffe859b87b5656c2a965bf42c1fe74431f2e573603955b352c171012edf722bf833210bbbcb6d27fbc9949937ec1ea8d92d20be590377208b63fa5f2bbef81e926abcc0407252747fe4579d594657c67a203df5ef785c092e3ec05b9489f0c36edc4f712135ef1eaeb027c53cd8e68b889837196bfa6514c86edb5f1e61843d3e1114a26cce158e7d71813947", 0xbe, 0x84004, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) 16:01:50 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) r1 = socket(0x2, 0xa, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:50 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1, 0x1}}, 0x10) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) (async) 16:01:50 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x10}, 0x14}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000e143e6e5bca304edf279c1d4d78978a086b95cb076cd34f9e2e38cffe6ffd806c1c6ef0181f2fb1adc26d67797325da11acb0cd754b5247113900a11aad984e5e214cac73edbc16711c817b5bb0b3c87b02a91446be56de15f9dfb0d65c24033c495b5c8677e5fc69ea64aac8857e8ec283cddd143912eac94f5bd1fb278bf41d4d2b4722296a31fc40540cba174e4df269718bda5d4308fc6de1f8cd313e14992e8ff1c994a571b51b0b2ab64aebf9bab30f62528150411bdce2751d4cee3cca106499dafb37595c126a8e5b30c9ba21be4a7"], 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) 16:01:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000180)={r1, 0x5}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) write$midi(0xffffffffffffffff, &(0x7f0000000080)="aa0275d81e2a06907392e64ebf5937b7f1678d7547f596c1029a7a2c79c9ff56f179d6bf353a49c2198101b99a7f8515b55641192c4c2688ba7c794d404622430f56340d1a5591002dca2471096486c45a149344beeb1e28e6879e113210d7eea662ad0d27f36a762f1e70888731e9665e7bf0197f49f0fef8e649365eb3bdac98ef803bc2fc41351976089d3d7456723350c5f2c58c4044f3276dd81d57b69b654f20e3b21926d15df4c456021c0253b88518f0f6744359540c98205e16522529b506029e0f25fac7280b0744223636239d36fac382957aaf173b5836", 0xdd) sendto$inet(r0, &(0x7f00000001c0)="c909b9a30342015b7f8f54a33222b97821a2df361f9c59f46e2480ab51ed7fc1c29e78c40d27066637fe691ceb5a3dd5910ffe859b87b5656c2a965bf42c1fe74431f2e573603955b352c171012edf722bf833210bbbcb6d27fbc9949937ec1ea8d92d20be590377208b63fa5f2bbef81e926abcc0407252747fe4579d594657c67a203df5ef785c092e3ec05b9489f0c36edc4f712135ef1eaeb027c53cd8e68b889837196bfa6514c86edb5f1e61843d3e1114a26cce158e7d71813947", 0xbe, 0x84004, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000180)={r1, 0x5}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) write$midi(0xffffffffffffffff, &(0x7f0000000080)="aa0275d81e2a06907392e64ebf5937b7f1678d7547f596c1029a7a2c79c9ff56f179d6bf353a49c2198101b99a7f8515b55641192c4c2688ba7c794d404622430f56340d1a5591002dca2471096486c45a149344beeb1e28e6879e113210d7eea662ad0d27f36a762f1e70888731e9665e7bf0197f49f0fef8e649365eb3bdac98ef803bc2fc41351976089d3d7456723350c5f2c58c4044f3276dd81d57b69b654f20e3b21926d15df4c456021c0253b88518f0f6744359540c98205e16522529b506029e0f25fac7280b0744223636239d36fac382957aaf173b5836", 0xdd) (async) sendto$inet(r0, &(0x7f00000001c0)="c909b9a30342015b7f8f54a33222b97821a2df361f9c59f46e2480ab51ed7fc1c29e78c40d27066637fe691ceb5a3dd5910ffe859b87b5656c2a965bf42c1fe74431f2e573603955b352c171012edf722bf833210bbbcb6d27fbc9949937ec1ea8d92d20be590377208b63fa5f2bbef81e926abcc0407252747fe4579d594657c67a203df5ef785c092e3ec05b9489f0c36edc4f712135ef1eaeb027c53cd8e68b889837196bfa6514c86edb5f1e61843d3e1114a26cce158e7d71813947", 0xbe, 0x84004, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) (async) 16:01:50 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x0, @empty}, r1}}, 0x30) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r4) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x1}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfb}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x10000000) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="44010000", @ANYRES16=r5, @ANYBLOB="040025bd7000ffdbdf2501000000050007000c000000050011001b0000000c0009000200aaaaaaaaaaaa0c0009000203aaaaaaaaaaaa06000a00ffff0000"], 0x44}, 0x1, 0x0, 0x0, 0x24040000}, 0x40) r7 = socket(0x2c, 0x5, 0xfffff1aa) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r8, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1f}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x9) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54b0fa4d]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}], r3, 0x1, 0x1, 0x90}}, 0x20) 16:01:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x80, 0x1, 0x6, 0x81, {{0x24, 0x4, 0x3, 0x1f, 0x90, 0x67, 0x0, 0x4, 0x2f, 0x0, @remote, @empty, {[@timestamp={0x44, 0x10, 0x8a, 0x0, 0x7, [0x8, 0x0, 0x2]}, @cipso={0x86, 0x6b, 0x0, [{0x2, 0x7, "7b96d3f5c3"}, {0x7, 0x10, "784fff77ddda3c235c4238d9cfa3"}, {0x1, 0xf, "21fda18614ce62e85d842784d2"}, {0x5, 0x5, "c4544b"}, {0x2, 0xd, "f4c865e0cf3a347eaf4d1b"}, {0x5, 0xb, "175dc3f47ad79aa0c6"}, {0xe, 0x12, "8edfb2e09025b111bca9c480c852bf39"}, {0x7, 0xa, "195a23cfc6faf525"}, {0x1, 0x6, "8569f0e9"}]}]}}}}}) sendto$inet(r0, &(0x7f0000000140)="04e842b6578a366952e7f73540c3b2b228a98c415d3dc5f6799f123c4438b8b5328c4eaccfca6c7d3d0d87d5d24334a1c21b426dcc94ba895427e54daec542651f0a", 0x42, 0x20002080, &(0x7f00000001c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:50 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) r1 = socket(0x2, 0xa, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:50 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1, 0x1}}, 0x10) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:50 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x10}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000e143e6e5bca304edf279c1d4d78978a086b95cb076cd34f9e2e38cffe6ffd806c1c6ef0181f2fb1adc26d67797325da11acb0cd754b5247113900a11aad984e5e214cac73edbc16711c817b5bb0b3c87b02a91446be56de15f9dfb0d65c24033c495b5c8677e5fc69ea64aac8857e8ec283cddd143912eac94f5bd1fb278bf41d4d2b4722296a31fc40540cba174e4df269718bda5d4308fc6de1f8cd313e14992e8ff1c994a571b51b0b2ab64aebf9bab30f62528150411bdce2751d4cee3cca106499dafb37595c126a8e5b30c9ba21be4a7"], 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000e143e6e5bca304edf279c1d4d78978a086b95cb076cd34f9e2e38cffe6ffd806c1c6ef0181f2fb1adc26d67797325da11acb0cd754b5247113900a11aad984e5e214cac73edbc16711c817b5bb0b3c87b02a91446be56de15f9dfb0d65c24033c495b5c8677e5fc69ea64aac8857e8ec283cddd143912eac94f5bd1fb278bf41d4d2b4722296a31fc40540cba174e4df269718bda5d4308fc6de1f8cd313e14992e8ff1c994a571b51b0b2ab64aebf9bab30f62528150411bdce2751d4cee3cca106499dafb37595c126a8e5b30c9ba21be4a7"], 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) 16:01:50 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), r0, 0x1}}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) 16:01:50 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}}}, 0x48) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x7, 0x24300) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008800) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}}}, 0x48) 16:01:50 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r0, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) r1 = socket(0x2, 0xa, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:51 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x0, @empty}, r1}}, 0x30) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r4) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x1}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfb}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x10000000) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfb}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x10000000) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="44010000", @ANYRES16=r5, @ANYBLOB="040025bd7000ffdbdf2501000000050007000c000000050011001b0000000c0009000200aaaaaaaaaaaa0c0009000203aaaaaaaaaaaa06000a00ffff0000"], 0x44}, 0x1, 0x0, 0x0, 0x24040000}, 0x40) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="44010000", @ANYRES16=r5, @ANYBLOB="040025bd7000ffdbdf2501000000050007000c000000050011001b0000000c0009000200aaaaaaaaaaaa0c0009000203aaaaaaaaaaaa06000a00ffff0000"], 0x44}, 0x1, 0x0, 0x0, 0x24040000}, 0x40) r7 = socket(0x2c, 0x5, 0xfffff1aa) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r8, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1f}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x9) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54b0fa4d]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}], r3, 0x1, 0x1, 0x90}}, 0x20) 16:01:51 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), r0, 0x1}}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) 16:01:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x30004041}, 0x40000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r4) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000044}, 0x8000) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r3, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r3, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x100}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x19}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x30}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040}, 0x80) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_DEBUG={0x8}]}, 0x2c}}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x77}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0xfea7a9573c01268f) 16:01:51 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair(0xa, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r1, &(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x4}}, 0x10) 16:01:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x80, 0x1, 0x6, 0x81, {{0x24, 0x4, 0x3, 0x1f, 0x90, 0x67, 0x0, 0x4, 0x2f, 0x0, @remote, @empty, {[@timestamp={0x44, 0x10, 0x8a, 0x0, 0x7, [0x8, 0x0, 0x2]}, @cipso={0x86, 0x6b, 0x0, [{0x2, 0x7, "7b96d3f5c3"}, {0x7, 0x10, "784fff77ddda3c235c4238d9cfa3"}, {0x1, 0xf, "21fda18614ce62e85d842784d2"}, {0x5, 0x5, "c4544b"}, {0x2, 0xd, "f4c865e0cf3a347eaf4d1b"}, {0x5, 0xb, "175dc3f47ad79aa0c6"}, {0xe, 0x12, "8edfb2e09025b111bca9c480c852bf39"}, {0x7, 0xa, "195a23cfc6faf525"}, {0x1, 0x6, "8569f0e9"}]}]}}}}}) sendto$inet(r0, &(0x7f0000000140)="04e842b6578a366952e7f73540c3b2b228a98c415d3dc5f6799f123c4438b8b5328c4eaccfca6c7d3d0d87d5d24334a1c21b426dcc94ba895427e54daec542651f0a", 0x42, 0x20002080, &(0x7f00000001c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) (async) sendto$inet(r0, &(0x7f0000000140)="04e842b6578a366952e7f73540c3b2b228a98c415d3dc5f6799f123c4438b8b5328c4eaccfca6c7d3d0d87d5d24334a1c21b426dcc94ba895427e54daec542651f0a", 0x42, 0x20002080, &(0x7f00000001c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:51 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}}}, 0x48) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x7, 0x24300) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008800) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}}}, 0x48) 16:01:51 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair(0xa, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r1, &(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x4}}, 0x10) 16:01:51 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), r0, 0x1}}, 0x18) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) 16:01:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x30004041}, 0x40000) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r4) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000044}, 0x8000) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r3, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) (async, rerun: 64) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r3, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x100}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x19}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x30}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_DEBUG={0x8}]}, 0x2c}}, 0x8000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x77}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0xfea7a9573c01268f) 16:01:51 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x0, @empty}, r1}}, 0x30) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r4) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x1}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfb}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x10000000) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="44010000", @ANYRES16=r5, @ANYBLOB="040025bd7000ffdbdf2501000000050007000c000000050011001b0000000c0009000200aaaaaaaaaaaa0c0009000203aaaaaaaaaaaa06000a00ffff0000"], 0x44}, 0x1, 0x0, 0x0, 0x24040000}, 0x40) r7 = socket(0x2c, 0x5, 0xfffff1aa) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r8, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1f}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x9) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54b0fa4d]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}], r3, 0x1, 0x1, 0x90}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x0, @empty}, r1}}, 0x30) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r4) (async) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r6) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfb}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x10000000) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="44010000", @ANYRES16=r5, @ANYBLOB="040025bd7000ffdbdf2501000000050007000c000000050011001b0000000c0009000200aaaaaaaaaaaa0c0009000203aaaaaaaaaaaa06000a00ffff0000"], 0x44}, 0x1, 0x0, 0x0, 0x24040000}, 0x40) (async) socket(0x2c, 0x5, 0xfffff1aa) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r8, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1f}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x9) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54b0fa4d]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}], r3, 0x1, 0x1, 0x90}}, 0x20) (async) 16:01:51 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair(0xa, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r1, &(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x4}}, 0x10) 16:01:51 executing program 5: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}}}, 0x48) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x7, 0x24300) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008800) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}}}, 0x48) 16:01:51 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x27, 0xa, 0xffffff85, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:51 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x80, 0x1, 0x6, 0x81, {{0x24, 0x4, 0x3, 0x1f, 0x90, 0x67, 0x0, 0x4, 0x2f, 0x0, @remote, @empty, {[@timestamp={0x44, 0x10, 0x8a, 0x0, 0x7, [0x8, 0x0, 0x2]}, @cipso={0x86, 0x6b, 0x0, [{0x2, 0x7, "7b96d3f5c3"}, {0x7, 0x10, "784fff77ddda3c235c4238d9cfa3"}, {0x1, 0xf, "21fda18614ce62e85d842784d2"}, {0x5, 0x5, "c4544b"}, {0x2, 0xd, "f4c865e0cf3a347eaf4d1b"}, {0x5, 0xb, "175dc3f47ad79aa0c6"}, {0xe, 0x12, "8edfb2e09025b111bca9c480c852bf39"}, {0x7, 0xa, "195a23cfc6faf525"}, {0x1, 0x6, "8569f0e9"}]}]}}}}}) sendto$inet(r0, &(0x7f0000000140)="04e842b6578a366952e7f73540c3b2b228a98c415d3dc5f6799f123c4438b8b5328c4eaccfca6c7d3d0d87d5d24334a1c21b426dcc94ba895427e54daec542651f0a", 0x42, 0x20002080, &(0x7f00000001c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:51 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, 0x0) r1 = socket(0x2, 0xa, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040092}, 0x4004846) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1f, 0x6, 0x1) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x39}}, 0x20040085) 16:01:51 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x50, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 16:01:51 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x27, 0xa, 0xffffff85, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x30004041}, 0x40000) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r4) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000044}, 0x8000) (async) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r3, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r3, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x100}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x19}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x30}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_DEBUG={0x8}]}, 0x2c}}, 0x8000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x77}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0xfea7a9573c01268f) 16:01:51 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x0, 0xa}}, 0x20) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f00000001c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r2}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r6}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x284e14fc7e5dd977}}, 0x20) 16:01:51 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) 16:01:51 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, 0x0) r1 = socket(0x2, 0xa, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040092}, 0x4004846) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket(0x1f, 0x6, 0x1) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x39}}, 0x20040085) (rerun: 64) 16:01:51 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x50, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 16:01:51 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair(0x27, 0xa, 0xffffff85, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x100000000, 0x1d9000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400ad4859d25e4be4d4f29f05125e0651614779f2a5c0d0689af2ca0ec847f775eb53338319215a88d33c39a580fd179f755f41e49246827dde9ac5ee85576fe9669b3f6527b1c1", @ANYRES16=r2, @ANYBLOB="0100000000000000000011000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000010c78a33287c173e89e7158591df9516f7bc5607f8fa3377decdcd91869c52467932cc5e35d17ddf1949fea8fe62ad975829aa9c60d63920c0075e0872796b801abe45ad2a28ae999fa824daf617c7dbdb078d447dcc96f16a514f00541c29e62f092c7afed758b9d2801e12aceb801828cbbae3be191b91af2a19f426ee45c0ce4f51a29cea994336987bd8069131a660f17bfdf0b05100d1c2f7c96824d6f9b6b7e925550f661fe43bde616a321820ecc30f3da83a6d37dc32f12f2d6374916cd2b267bf98", @ANYRES16=r2, @ANYBLOB="200027bd7000fcdbdf250500000005002e000100000005002d0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40094}, 0x80) 16:01:51 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x0, 0xa}}, 0x20) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f00000001c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r2}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r6}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x284e14fc7e5dd977}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x0, 0xa}}, 0x20) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) (async) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f00000001c0)}}, 0x10) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r2}}, 0x48) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r6}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x284e14fc7e5dd977}}, 0x20) (async) 16:01:51 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) 16:01:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @remote}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x0, {0x2, 0x4e23, @rand_addr=0x64010102}, 'netpci0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000)=0x2ad88aec, 0x4) 16:01:51 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0x50, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 16:01:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @remote}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x0, {0x2, 0x4e23, @rand_addr=0x64010102}, 'netpci0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000)=0x2ad88aec, 0x4) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @remote}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x0, {0x2, 0x4e23, @rand_addr=0x64010102}, 'netpci0\x00'}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000)=0x2ad88aec, 0x4) (async) 16:01:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x100000000, 0x1d9000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400ad4859d25e4be4d4f29f05125e0651614779f2a5c0d0689af2ca0ec847f775eb53338319215a88d33c39a580fd179f755f41e49246827dde9ac5ee85576fe9669b3f6527b1c1", @ANYRES16=r2, @ANYBLOB="0100000000000000000011000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000010c78a33287c173e89e7158591df9516f7bc5607f8fa3377decdcd91869c52467932cc5e35d17ddf1949fea8fe62ad975829aa9c60d63920c0075e0872796b801abe45ad2a28ae999fa824daf617c7dbdb078d447dcc96f16a514f00541c29e62f092c7afed758b9d2801e12aceb801828cbbae3be191b91af2a19f426ee45c0ce4f51a29cea994336987bd8069131a660f17bfdf0b05100d1c2f7c96824d6f9b6b7e925550f661fe43bde616a321820ecc30f3da83a6d37dc32f12f2d6374916cd2b267bf98", @ANYRES16=r2, @ANYBLOB="200027bd7000fcdbdf250500000005002e000100000005002d0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40094}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) (async) syz_open_dev$audion(&(0x7f0000000000), 0x100000000, 0x1d9000) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400ad4859d25e4be4d4f29f05125e0651614779f2a5c0d0689af2ca0ec847f775eb53338319215a88d33c39a580fd179f755f41e49246827dde9ac5ee85576fe9669b3f6527b1c1", @ANYRES16=r2, @ANYBLOB="0100000000000000000011000000"], 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000010c78a33287c173e89e7158591df9516f7bc5607f8fa3377decdcd91869c52467932cc5e35d17ddf1949fea8fe62ad975829aa9c60d63920c0075e0872796b801abe45ad2a28ae999fa824daf617c7dbdb078d447dcc96f16a514f00541c29e62f092c7afed758b9d2801e12aceb801828cbbae3be191b91af2a19f426ee45c0ce4f51a29cea994336987bd8069131a660f17bfdf0b05100d1c2f7c96824d6f9b6b7e925550f661fe43bde616a321820ecc30f3da83a6d37dc32f12f2d6374916cd2b267bf98", @ANYRES16=r2, @ANYBLOB="200027bd7000fcdbdf250500000005002e000100000005002d0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40094}, 0x80) (async) 16:01:51 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x0, 0xa}}, 0x20) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f00000001c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r2}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r6}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x284e14fc7e5dd977}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x0, 0xa}}, 0x20) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) (async) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f00000001c0)}}, 0x10) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r2}}, 0x48) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r6}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x284e14fc7e5dd977}}, 0x20) (async) 16:01:51 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) (async) 16:01:51 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, 0x0) r1 = socket(0x2, 0xa, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040092}, 0x4004846) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1f, 0x6, 0x1) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x39}}, 0x20040085) syz_open_dev$sndmidi(&(0x7f0000000180), 0x200, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, 0x0) (async) socket(0x2, 0xa, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040092}, 0x4004846) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1f, 0x6, 0x1) (async) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x39}}, 0x20040085) (async) 16:01:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @remote}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x0, {0x2, 0x4e23, @rand_addr=0x64010102}, 'netpci0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000)=0x2ad88aec, 0x4) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @remote}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x0, {0x2, 0x4e23, @rand_addr=0x64010102}, 'netpci0\x00'}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000)=0x2ad88aec, 0x4) (async) 16:01:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) 16:01:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x100000000, 0x1d9000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400ad4859d25e4be4d4f29f05125e0651614779f2a5c0d0689af2ca0ec847f775eb53338319215a88d33c39a580fd179f755f41e49246827dde9ac5ee85576fe9669b3f6527b1c1", @ANYRES16=r2, @ANYBLOB="0100000000000000000011000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000010c78a33287c173e89e7158591df9516f7bc5607f8fa3377decdcd91869c52467932cc5e35d17ddf1949fea8fe62ad975829aa9c60d63920c0075e0872796b801abe45ad2a28ae999fa824daf617c7dbdb078d447dcc96f16a514f00541c29e62f092c7afed758b9d2801e12aceb801828cbbae3be191b91af2a19f426ee45c0ce4f51a29cea994336987bd8069131a660f17bfdf0b05100d1c2f7c96824d6f9b6b7e925550f661fe43bde616a321820ecc30f3da83a6d37dc32f12f2d6374916cd2b267bf98", @ANYRES16=r2, @ANYBLOB="200027bd7000fcdbdf250500000005002e000100000005002d0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40094}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) (async) syz_open_dev$audion(&(0x7f0000000000), 0x100000000, 0x1d9000) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400ad4859d25e4be4d4f29f05125e0651614779f2a5c0d0689af2ca0ec847f775eb53338319215a88d33c39a580fd179f755f41e49246827dde9ac5ee85576fe9669b3f6527b1c1", @ANYRES16=r2, @ANYBLOB="0100000000000000000011000000"], 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000010c78a33287c173e89e7158591df9516f7bc5607f8fa3377decdcd91869c52467932cc5e35d17ddf1949fea8fe62ad975829aa9c60d63920c0075e0872796b801abe45ad2a28ae999fa824daf617c7dbdb078d447dcc96f16a514f00541c29e62f092c7afed758b9d2801e12aceb801828cbbae3be191b91af2a19f426ee45c0ce4f51a29cea994336987bd8069131a660f17bfdf0b05100d1c2f7c96824d6f9b6b7e925550f661fe43bde616a321820ecc30f3da83a6d37dc32f12f2d6374916cd2b267bf98", @ANYRES16=r2, @ANYBLOB="200027bd7000fcdbdf250500000005002e000100000005002d0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40094}, 0x80) (async) 16:01:51 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:51 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}}, {0xa, 0x0, 0xffffffff, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) 16:01:51 executing program 1: write$midi(0xffffffffffffffff, &(0x7f0000000080)="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", 0x1000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="ae24023554ff65367a33fb9883c690e6d25a36e42257dd03695b2e1449", 0x1d) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:51 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0xa5d702e9cd74f926, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'sit0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 16:01:51 executing program 4: r0 = socket(0x2, 0xa, 0x0) accept$alg(r0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:51 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}}, {0xa, 0x0, 0xffffffff, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, 0x0, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0x4, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) 16:01:51 executing program 1: write$midi(0xffffffffffffffff, &(0x7f0000000080)="ef896b9b7b3fa0d0c15be708edc70fa338b9d3c96cd7604a90607a01f4694b5b5ae57eb9d796c59ea1268b7095bb8a683c6345427100df66686a3428f5d38a9db520c8ba6ac104dd0f3e548c1fa5a07e93b0676253b54d44572087851d3b82cdf2840a5b60ebe18644277c62fe04edbc4de9c743973088a29c12765f2498f42832e9e82ddbbfa0d0adbc877b5de33593c1c62afd23b33e538e17ee478831ef00984179a171b29386e6d88115918593e18ed0b94d340ce8f0d83ea1195bf55e8561f3e676d0ed60f6ecaaaba8a5ec71907190df7d66944bf74c01d189d3d244ca33f70221ec6d8e1f66bf30b1141f837553d106960aad89b6f5ee3e14570a4ae6f87755d02b2ffaf1dc2ec1d2110ae28b6dade36e129cca03cb2087a6010b5a7a5ff9f9461be15744a22db9c058bae46c9850d4f615e0c5045efdbb1561582a67b8ad857b3190af8f8d2da60c0f805b23d5cf8cc2207f8972b96e5db6115ce4b293351d3677e132bfc69068e9d4fcb7a812382a722352e2f75cb18fbe0c7aa6390799cc98ab26ee038815b5ee03f6511c86830c33cd6d813265ef2369106a91075b38d96426915f9b8875d1ab6d542c4252e804037588b69f9bc5fed311e90d540324affe42daeb7f72fbff79c29248ce126e672c27af2e44f76c11c948011dfd82ba8338afa1173a0cac88d6d7f6dd3ca475e44ba8d236d48d0592ec3b3c0a51ec9faa92efa6e2953556d211d0fd351e311554d40da07154af0513eba529b76544e5ac40bba0cce17a171ec7dbccb8b6f5cb7ffba9a3ed2247345b9413db284211f505cf2d0b64b21393e2996714309500bd6b8d7a5ad84319732008156dcd4aac406b0802c0504acea1764a7e21ff1d6c66fe8a0dd72cc21f40915d522057128d90f10108e9f1841ee822247a97e3e39c4ddb3e998b8c576ebc3eaac28e94073d4e3d77f4d24b9070ba7b420fb1e924b8c39a2c1973d6b6bc0ffbeee6f0221ec75c4465ee560ffbc61728fdd7ffa55b3ecb68462fca7d8891e95a2411b7bb7bb7fa9c42ecc880dc007fe86eac7d94dec4acb7a6eceef5a552faf41107c7f6757d1d1756fe3c581cad0e1a2371cf1d9921a6ecde9fd796bad4d76f2d062f839611188c24c16e975efe5baeb9d816ba28f6246312d4069719e34ba1f1992097ecadf7ed6b6837c353e278e66fb497507b14178c0f7db6c15aa051a839a4b2fb280d568e96bc744bb572db453212f7f93bf890af7da4cdc41b6b55487855d89b5f1666ac1a6c641bcff0d901ea17368cef63628707e2cded5081d9fe837da4fe9b9021c80dcf481b1a8514c94d2b1db169d6ca115df67d4405ffcd708d9ff3647c59d6f9120d4b339c4725f8d0ea9e983456f1ce68b7d14e6bad56d535787e38adf40b63136d1dce059e47d75d1a63d441fec32d6ab06dfae5cb23e8f9d93e85ef179d10dd384c8a7e1b23a562653309485e81208ddfb4dcf3e2ace12c0c7e2421bed0a42fb88a5609b6d35132c04ffe95057845b3d4f0b28eca0f24f7baf5143ce2795d12b4eb40a3c66b2279e7775c3b619242953e9e0c5059746421acbfe83d1abfaa7bb5604cf7b072637936dad02d3e612a9c372dc8fbbb85c7ea5bca5c3e20a5d06a1e71ae3f33891d24440e8e902b956155be598763034b6e14c540799de56832b513477f01e463736598ad3aff59fcaf4267a78b358da61ddebbf9685eaa41d2131e47c813a77618eeae9f10d0e2586006e93a0e52dcd9824bf142b126c548f3d651a9556c54d07a50cd5b61d5fbd04afc9ef9753cc1dcf19aebae6a12903c3a213cfbfe6b9f4766f8aac2623eb2b2c929510e03468e17118c528852d0a5a3e60fe3eeb0a30b0baab92bb2da63ec2617d3fa3613e8f210f762ea7bcab58fa1ba317c55ccb30db37ed1744ed4d8e99a204a00aa90939dba7d2940deedda5979e840d297bbb95f7498d5f1c9590ae3079e49534c1b21ce20a069a9ba70e146ca86ec0ace8bc756693e9f0115f2536383b8a471b58a918bd57bb744dbfa3c871801ca8d81ad6adbe9bb22ac16bb8eb57177b06cd4a120538d9d171894d54756e7936bb7b35dfe10d3d82fd5b53560ee59bf77e0e3633468efee6ec649ff27368f72cc6b0509ff2bdec399817e3114884d50d6a43ff9d7455254f7f4ccf6f2f7c4dd1945ba13fa518b2a1db79d1841dca29a319f8001fd3910d406ec0e3fbc14abc4d77584aa4a6b87e7fc2bebbda8c2730b9ee032595df9e04022386460ce6e503a84f1c83bb22fca6e12c6bebdc879bd0b6a9e763a97d7f6ac570ffa3deb76f97758968a28acb6431ce35d49274c5b7a06c7f5ae8b9d6641a1a55415eb17da883657d4aa55d1f41f5260b9a74f755a8b7e5bdcbd5d56d77a61f9951552d5ccc0966d8fb25850fdad4e622ea0175ccecaae40699ad207de400b67e19454d64d5fed2d10b8cc5293b606d3f2e8c114a98084ca9980ae1884d8be33f932f35606bfc4dde88f2396bd8613337d55d92abd98e43126f3680d4a99f289d9fa1b167cba02631d2440de3bb9b8eca42ecc4feea60745c0d0efa1a06e69e61720fcc282afb6b9786894a87451fe82a5fddf211574b2ae1284d78724edd2d83edc1182f1b54a5d48369fad2d73300e7d9a395b9eb84dd87e6605fd8e21645ac130d04d05b4df47669de1dade3def561a7238ef9e4023c96799d1b6c3c7d06f6bb01accef428aeab5a65196a810facd572e79d73ef25c308de79347e2ec823cdb835ddf1715bdfbb0a8706a09554bd64769ed3b6fed0b97172045f60b7ad78f411c7b71d6b70b80d72453317b7715fd313a9e38deeba841792cda9b723320af8e62ca07de2f6c8e9924470482c378bf49ec8556d9be6336937320ae6c383d580f78916143bf6272b2d35e44f706bc9ea09589d088f46b6e38be45936bd8d1d0817a7622378111bef81ecf0074789e3f9b4c81eb1c4226979cdb9cfc9863bfc5cba52416b088411eb31c830265e787535770f099d0418bee9c410de5ff826a25da748c30207cd2929391605788b93f1cf7d971adf09fe67fc8689a1beab244db655a2f4c9b6218994e12e43d3dabc4fc5a2859dc40fbe16a1d0f034a77e9323231b8fde82778774ef9c899c21250fe49fb984cd69d237f5c71ea3f4761b6ad5bd085556335e746a22240cdfb3a285d35d86868d6ebdc7e012f63c1ba721c1c6a121c5279c014427ceccffecfbbc494d957ddd824935d8b494bf67b1f7fe3bc0dd49cc25217702bf3e8ecc41d5cba9b6bf927d45f2bf1ffcc0c84da3c84026d9e33f46cd63076217c270410d84971acc3b9428e1fa3bb4caa3fa63653d832ac98718fa287aae0200e26bf725a83ac963d1aa5cfe1ae95b968121c29ce9c5871614e72866d54d2a5a913dd20489eb76e0f54a7c47bd627c19363823201c5f19f563cf49cf45ca6585ee75c110f6ce834ead9447b44c14d112a1e2599082b108402d86bab4a928a5829a0bcbd31bea8f8b0cc6b149ca17551f5b5fec528e476aabf79cce6518b7c6be6f953c51d85500cc8cd0974f3a459b1ad3cf3f790c30b97c9e5f335571975c734a781f96aca6ce974988cf4906c1d45cf637f17e0bb3e01705cb4bdf03950583bf1bc618574cab90477c2d83240220742142ee2cf983349dc887498aa163772d7f060b556b49a009ed8d22c4ac2d8b79ba801a0830c6a213a25834a6d4f0f4ae5cf87abb81750f2f685f7e57c450e16b382466ede93c004a5b5ab0612a011086c3b706120d459f711f7d7430f61c041dd6858708b216f88ef89cac9fbfde8e5b9b13282a77963303ba2bddfb836823ef53a8459aa722cad008ffd5a2ccd036cc546a128fff0b364db72c9057b8c1e79f56baea1bcb329cdd224599b34187307e48615554ee22393a299eb79d7f071fb344f946eafd0c92c7222fd561056bcf3ffc02030353c8807f2f13ecf7553fbe0e443aacb7054fc9f1b2c95741c08e36b3e98fd412930ba87fd09a98b5a14b9acca263004c23b22268989cc260d1a86c42983e12a1df8f5692245f04b84879538a23ab21a2873d00413bb2b4bec5f0554a36aa6d05b48a0437818fea8ddcada5895db4aa62a9bd35ec6924749fdec7002ff9f4664ca992f2cfdcc890b3204a0dd14f016ade52342f72a0563ae7385833c68e27830bafdcd32413217ea6cb749932560e7865bd926fca2ca45458a98579164b4addfdc560869c8a65edf09c2866b7ee16f70c4586114b24ef9375a4e31c78cd28cf73f742238217ae9d4725bda066a66b9171b408279cf9635dfd57e49d0e39160a3db9805b305b69e41175e67e6112459295c45c08ae05e9d8962ffab2581a101dc8a194cad6c864132159159d8203d5e2626a0db7a01c9f0fa16d77fa0a61eeb4e891348eaf493fec0ca67cb34001d7a72ed288fbe4e157a4864fa4fcadf23341ce4955d459c9fafbbb70aa4d4b82281878c9a4911a02dd5eee22e23154a523ccf1af554d8d5886a7a8a20f4b3162d8215fcfee30cb4716534226a7778ce75a66c618023e1d0fc31ad704c3c1ee46a82fc3d241f0758c47d84397c012e62ac0b9f9daccb1c8199b0c18b99af0a13ab238c729d5aae1f73ad71801acbf3a7ee4390441e4f730c8a9208981a900f2fe4421718aefd12c2ec43e4d15b4194b79de960917f70bd1c8d76ed1658bc3e0a67ea0a16084605420311cb0e1bca2c2db34c591a0fa99bfda96319158078a1913042bd90b3e61ed2c622754a88983e5f3693ac0849337d13ec43c7eb87d2b4ef3a8d9a1e533fba0df1e90e16865acaf5214eafae763082b08de5ef9b60da330e8aefa570e13578723213cbc49b75e36db564abb84621471a49b830029cdbee3c7a56ff0b3d1bde61a2ae789411e51e37f757a00df2670551a4bce9bcb7a219b3808fcedf3284369cfb481e0d75a0e0898b3bde44de68981f566d5b4f14d5970aad52363b710a92afc9e3aeaefc9baeaa5910ed25a1c9587ba97ee07520f8dfe3bd9c28b3861579796f39068e1c56f9f1a815fd15e5e13e45d9d6b09c1bee66f49e23453ab77b138861d301866dea21f3b746c7611e720eaba1e21a8e9587490e9c2311b17c245be9f7e0be67474805731d278232b3eb0899bb9b95d1258e03a5184dafec8ac3031348cc19453457b64550de683323064571ab32016c7d6c6cee4e4baaf46e0010e04d1647ef47855cd40f6779bebc8fa1ffb364285d1e739520cbdb8a4b93c122100a44ce07823c810c27c9df1253270f715f6279e05f46e53bb16a45c99db1b61bcced21e30b82823ce79d74643c7721d54cb70028b14a58020b13c8798def08c5f5454f89732a1fe9467d6d2b9049df1b1a436dcea3afb1dc2c6f0cec08ad7ecae0dda04aed99c6558a2afda9d667e676aa1da952cb3a3b6374a4532134ed3903c25e102c9d4a5113003ec1f106d4fdac38235e9a3678fdcd1643b965bccd91815912623559882f38512c682f01ef30e67b0079d9f85677eab6343f3030c5aef4dca06df012b946a08e78de2e5d48df908a36e2710272621d2f5bf471792949488276411c37aa991f3ba865b99d0afeba43662bc868e8168c17cdf72ca4db61682128afb0f55cd2ccb478e4d47f10d40f53d12f56d9362cbc99c2e833510d34005a6e78ff3a2a3b07896118bbf91f614301bb8882be3f900c2c8c0d5699b5ea54e8187c9b9e94b80e67b6cb0f9bd509527d2547ec6561669a404688aa466fab81ca93d87fb3c1e7a934cd7dff540eff2387ca9a58ec074c47e4590a302d0d04e1bec92a1f", 0x1000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="ae24023554ff65367a33fb9883c690e6d25a36e42257dd03695b2e1449", 0x1d) (async, rerun: 32) r0 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:51 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:51 executing program 4: r0 = socket(0x2, 0xa, 0x0) accept$alg(r0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket(0x2, 0xa, 0x0) (async) accept$alg(r0, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) 16:01:51 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}}, {0xa, 0x0, 0xffffffff, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0xa5d702e9cd74f926, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'sit0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 16:01:51 executing program 1: write$midi(0xffffffffffffffff, &(0x7f0000000080)="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", 0x1000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="ae24023554ff65367a33fb9883c690e6d25a36e42257dd03695b2e1449", 0x1d) socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:51 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x10000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], 0xffffffffffffffff, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000300)={0x16, 0x98, 0xfa00, {&(0x7f00000002c0), 0x3, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3, 0x40, {"b424ff72dd0a3ff4adaa90276434d37a"}, 0x1000, 0xed7, 0xc4c}}}, 0xa0) 16:01:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x90) 16:01:51 executing program 4: r0 = socket(0x2, 0xa, 0x0) accept$alg(r0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket(0x2, 0xa, 0x0) (async) accept$alg(r0, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) 16:01:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 32) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x90) (rerun: 32) 16:01:51 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0xa5d702e9cd74f926, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'sit0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 16:01:51 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 16:01:52 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket(0x29, 0x4, 0x8) 16:01:52 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:52 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x10000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], 0xffffffffffffffff, 0x1, 0x1, 0x90}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000300)={0x16, 0x98, 0xfa00, {&(0x7f00000002c0), 0x3, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3, 0x40, {"b424ff72dd0a3ff4adaa90276434d37a"}, 0x1000, 0xed7, 0xc4c}}}, 0xa0) 16:01:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x90) 16:01:52 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 16:01:52 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:52 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket(0x29, 0x4, 0x8) 16:01:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$midi(r1, &(0x7f0000000480)=""/113, 0x71) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001e40), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r5, 0x1}}, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:52 executing program 3: connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x1, 0x4}}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x6f) 16:01:52 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x10000) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], 0xffffffffffffffff, 0x1, 0x1, 0x90}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000300)={0x16, 0x98, 0xfa00, {&(0x7f00000002c0), 0x3, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3, 0x40, {"b424ff72dd0a3ff4adaa90276434d37a"}, 0x1000, 0xed7, 0xc4c}}}, 0xa0) 16:01:52 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket(0x29, 0x4, 0x8) socket(0x2, 0xa, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) socket(0x29, 0x4, 0x8) (async) 16:01:52 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0, 0x6}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000440)={0xb, 0x10, 0xfa00, {&(0x7f0000000280), r3, 0x7}}, 0x18) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) 16:01:52 executing program 3: connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x1, 0x4}}, 0x10) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x6f) 16:01:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$midi(r1, &(0x7f0000000480)=""/113, 0x71) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001e40), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r5, 0x1}}, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) read$midi(r1, &(0x7f0000000480)=""/113, 0x71) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001e40), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r5}}, 0x18) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r5, 0x1}}, 0x18) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) 16:01:52 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 16:01:52 executing program 5: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0, 0x6}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000440)={0xb, 0x10, 0xfa00, {&(0x7f0000000280), r3, 0x7}}, 0x18) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) 16:01:52 executing program 3: connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x1, 0x4}}, 0x10) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x6f) 16:01:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:52 executing program 4: sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x50, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9fc5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20f}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x40) r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:52 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="221633cdcb87fe8830125f24f5d6161415bc4c020000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0xb}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}]}, 0x64}}, 0x24040890) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$midi(r1, &(0x7f0000000480)=""/113, 0x71) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001e40), 0x2, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r5, 0x1}}, 0x18) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:52 executing program 4: sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x50, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9fc5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20f}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x40) (async) r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:52 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="221633cdcb87fe8830125f24f5d6161415bc4c020000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:52 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0, 0x6}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) (async, rerun: 64) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000440)={0xb, 0x10, 0xfa00, {&(0x7f0000000280), r3, 0x7}}, 0x18) (async) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) 16:01:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0xb}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}]}, 0x64}}, 0x24040890) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0xb}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}]}, 0x64}}, 0x24040890) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) 16:01:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0xc9, @multicast2, 0x4e22, 0x0, 'lblcr\x00', 0x2d, 0x1, 0x44}, 0x2c) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:52 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="221633cdcb87fe8830125f24f5d6161415bc4c020000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:52 executing program 4: sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x50, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9fc5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20f}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x40) (async) r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0xb}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}]}, 0x64}}, 0x24040890) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0xc9, @multicast2, 0x4e22, 0x0, 'lblcr\x00', 0x2d, 0x1, 0x44}, 0x2c) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x4048080) r2 = socket(0x29, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:52 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="e01505dbdefaf15047ca9bbd6065459ce5008d785e8ec1ac6ba8aef2be6b8c2119c0771aa37759c9acfc0063132012c25561f3b4", 0x34) write$cgroup_pressure(r0, &(0x7f0000000100)={'full', 0x20, 0x3, 0x20, 0x3}, 0x2f) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10}, 0x18) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 16:01:52 executing program 1: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4}, 0xc) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000500)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xffffffffffffffff}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x7, 0x20, 0x9, 0x101, {{0x22, 0x4, 0x1, 0x5, 0x88, 0x65, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @empty, {[@ra={0x94, 0x4}, @generic={0x82, 0x6, "4570d0d7"}, @cipso={0x86, 0x6, 0x3}, @lsrr={0x83, 0xb, 0xdc, [@remote, @multicast1]}, @ssrr={0x89, 0x1b, 0x7, [@empty, @private=0xa010102, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback]}, @timestamp_prespec={0x44, 0x3c, 0x7c, 0x3, 0x5, [{@remote, 0x8}, {@empty, 0xff}, {@loopback, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0x8}, {@multicast1, 0x2}]}]}}}}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', r1, 0x31ca6edaae3fa215, 0x8, 0x0, 0x10001, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x64, 0x0, 0x6, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x18}, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0xb5, 0x3, 0x2, [{@private=0xa010102, 0x3}, {@local, 0x400}, {@rand_addr=0x64010102, 0x1ff}]}, @end, @generic={0x89, 0x4, "3b14"}, @timestamp={0x44, 0xc, 0xc1, 0x0, 0x1, [0xd6, 0x773bb207]}]}}}}}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000810) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @ldst={0x2, 0x0, 0x0, 0x9, 0x9, 0xffffffffffffffc0, 0xffffffffffffffff}], &(0x7f00000000c0)='syzkaller\x00', 0x412, 0x0, 0x0, 0x100, 0x9, '\x00', r3, 0x18, r4, 0x8, &(0x7f0000000300)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xb, 0x3, 0x81}, 0x10, 0x12357}, 0x80) 16:01:52 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @ib={0x1b, 0x4, 0x8, {"6f362f81baf5d77639e1de5eac7958b5"}, 0x4, 0x33d3, 0xfffffffffffff93e}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x2, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) [ 1454.792877] IPVS: set_ctl: invalid protocol: 201 224.0.0.2:20002 16:01:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x4048080) r2 = socket(0x29, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000380)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xfffffffe}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x7fffffff, 0x80) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x0, {0xacb, 0x4, "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", 0x7, 0x52, 0x6, 0xfc, 0x2, 0x6, 0x70}, r3}}, 0x128) socket$bt_hidp(0x1f, 0x3, 0x6) 16:01:52 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="e01505dbdefaf15047ca9bbd6065459ce5008d785e8ec1ac6ba8aef2be6b8c2119c0771aa37759c9acfc0063132012c25561f3b4", 0x34) write$cgroup_pressure(r0, &(0x7f0000000100)={'full', 0x20, 0x3, 0x20, 0x3}, 0x2f) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10}, 0x18) (async) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 16:01:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0xc9, @multicast2, 0x4e22, 0x0, 'lblcr\x00', 0x2d, 0x1, 0x44}, 0x2c) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:52 executing program 1: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4}, 0xc) (async) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000500)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xffffffffffffffff}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x7, 0x20, 0x9, 0x101, {{0x22, 0x4, 0x1, 0x5, 0x88, 0x65, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @empty, {[@ra={0x94, 0x4}, @generic={0x82, 0x6, "4570d0d7"}, @cipso={0x86, 0x6, 0x3}, @lsrr={0x83, 0xb, 0xdc, [@remote, @multicast1]}, @ssrr={0x89, 0x1b, 0x7, [@empty, @private=0xa010102, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback]}, @timestamp_prespec={0x44, 0x3c, 0x7c, 0x3, 0x5, [{@remote, 0x8}, {@empty, 0xff}, {@loopback, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0x8}, {@multicast1, 0x2}]}]}}}}}) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', r1, 0x31ca6edaae3fa215, 0x8, 0x0, 0x10001, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x64, 0x0, 0x6, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x18}, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0xb5, 0x3, 0x2, [{@private=0xa010102, 0x3}, {@local, 0x400}, {@rand_addr=0x64010102, 0x1ff}]}, @end, @generic={0x89, 0x4, "3b14"}, @timestamp={0x44, 0xc, 0xc1, 0x0, 0x1, [0xd6, 0x773bb207]}]}}}}}) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000810) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @ldst={0x2, 0x0, 0x0, 0x9, 0x9, 0xffffffffffffffc0, 0xffffffffffffffff}], &(0x7f00000000c0)='syzkaller\x00', 0x412, 0x0, 0x0, 0x100, 0x9, '\x00', r3, 0x18, r4, 0x8, &(0x7f0000000300)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xb, 0x3, 0x81}, 0x10, 0x12357}, 0x80) 16:01:52 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @ib={0x1b, 0x4, 0x8, {"6f362f81baf5d77639e1de5eac7958b5"}, 0x4, 0x33d3, 0xfffffffffffff93e}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x2, @empty}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) [ 1454.903343] IPVS: set_ctl: invalid protocol: 201 224.0.0.2:20002 16:01:52 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="e01505dbdefaf15047ca9bbd6065459ce5008d785e8ec1ac6ba8aef2be6b8c2119c0771aa37759c9acfc0063132012c25561f3b4", 0x34) write$cgroup_pressure(r0, &(0x7f0000000100)={'full', 0x20, 0x3, 0x20, 0x3}, 0x2f) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10}, 0x18) (async) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 16:01:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x4048080) (async) r2 = socket(0x29, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) socketpair(0x5, 0x3, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8532}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x1) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x480c0) 16:01:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000380)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xfffffffe}}, 0x10) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) (async) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x7fffffff, 0x80) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x0, {0xacb, 0x4, "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", 0x7, 0x52, 0x6, 0xfc, 0x2, 0x6, 0x70}, r3}}, 0x128) socket$bt_hidp(0x1f, 0x3, 0x6) [ 1454.977055] IPVS: set_ctl: invalid protocol: 201 224.0.0.2:20002 16:01:52 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @ib={0x1b, 0x4, 0x8, {"6f362f81baf5d77639e1de5eac7958b5"}, 0x4, 0x33d3, 0xfffffffffffff93e}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x2, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @ib={0x1b, 0x4, 0x8, {"6f362f81baf5d77639e1de5eac7958b5"}, 0x4, 0x33d3, 0xfffffffffffff93e}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x2, @empty}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) (async) 16:01:52 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40000) 16:01:52 executing program 1: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4}, 0xc) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000500)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xffffffffffffffff}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x7, 0x20, 0x9, 0x101, {{0x22, 0x4, 0x1, 0x5, 0x88, 0x65, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @empty, {[@ra={0x94, 0x4}, @generic={0x82, 0x6, "4570d0d7"}, @cipso={0x86, 0x6, 0x3}, @lsrr={0x83, 0xb, 0xdc, [@remote, @multicast1]}, @ssrr={0x89, 0x1b, 0x7, [@empty, @private=0xa010102, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback]}, @timestamp_prespec={0x44, 0x3c, 0x7c, 0x3, 0x5, [{@remote, 0x8}, {@empty, 0xff}, {@loopback, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0x8}, {@multicast1, 0x2}]}]}}}}}) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', r1, 0x31ca6edaae3fa215, 0x8, 0x0, 0x10001, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x64, 0x0, 0x6, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x18}, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0xb5, 0x3, 0x2, [{@private=0xa010102, 0x3}, {@local, 0x400}, {@rand_addr=0x64010102, 0x1ff}]}, @end, @generic={0x89, 0x4, "3b14"}, @timestamp={0x44, 0xc, 0xc1, 0x0, 0x1, [0xd6, 0x773bb207]}]}}}}}) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000810) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @ldst={0x2, 0x0, 0x0, 0x9, 0x9, 0xffffffffffffffc0, 0xffffffffffffffff}], &(0x7f00000000c0)='syzkaller\x00', 0x412, 0x0, 0x0, 0x100, 0x9, '\x00', r3, 0x18, r4, 0x8, &(0x7f0000000300)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xb, 0x3, 0x81}, 0x10, 0x12357}, 0x80) 16:01:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) socketpair(0x5, 0x3, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8532}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x1) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x480c0) 16:01:52 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) socket$bt_hidp(0x1f, 0x3, 0x6) accept$ax25(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @default, @remote, @default, @rose, @bcast, @default]}, &(0x7f00000001c0)=0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r2, 0xffff}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:52 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40000) 16:01:52 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="020025bd43bdda3dfcc1ce00000006001c0006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40050) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @in6={0xa, 0x4e20, 0xdcdf, @mcast2, 0x7}}}, 0x90) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7aa, @remote, 0x3ff}}}, 0x30) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x1d, 0x4, 0xde74, &(0x7f00000004c0)={0xffffffffffffffff}) accept4$ax25(r6, 0x0, &(0x7f0000000500), 0x28a0271d57f9aa22) 16:01:52 executing program 5: setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x88, @multicast1, 0x4e23, 0xfdd, 'wlc\x00', 0x8, 0x0, 0x1}, 0x2c) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x682, 0x1, {"4a059162a4f0d3cf60556f846d95d6bd"}, 0x8, 0x2, 0x3a4}, @in6={0xa, 0x4e23, 0x7, @loopback, 0x7fffffff}}}, 0x118) 16:01:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000380)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xfffffffe}}, 0x10) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) (async) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x7fffffff, 0x80) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x0, {0xacb, 0x4, "a785219b7e6593d9de9678dd4d10d4792bdc42176627cabd888865b70fc5c69505ee5df85e74150bd71f63df88cafdbdbdaa1981656c48e55e01680f39e033ab6cbb252b4144214ed882423f1d84cbded2f227946cb225db02370b8fc0bbb20773cdd01f092dab3ecb924972fca027f5976ab5233b04af0484a9889924ec3614aa60de8b5cef61499380d892aa330422cefea4127a24c0b1d43f8a63d7309d61c299d0d6d8767e74c80d26269e0fe2b1290b041d5eef553bc6b235c15ad3b955db678e0e1f6506ab778f59067c500fa35af6d810cc9d0093a5188fb29437d6dfe70cacd299f78c29085e01fd44b4ad344ab0b9aab489fe4dbda8025100", 0x7, 0x52, 0x6, 0xfc, 0x2, 0x6, 0x70}, r3}}, 0x128) (async) socket$bt_hidp(0x1f, 0x3, 0x6) 16:01:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) socketpair(0x5, 0x3, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8532}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x1) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x480c0) 16:01:52 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) socket$bt_hidp(0x1f, 0x3, 0x6) (async) accept$ax25(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @default, @remote, @default, @rose, @bcast, @default]}, &(0x7f00000001c0)=0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) (rerun: 32) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r2, 0xffff}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:52 executing program 4: socket(0x2, 0xa, 0x0) (async) r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40000) 16:01:52 executing program 3: syz_init_net_socket$ax25(0x3, 0x3, 0x6) (async) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) socket$bt_hidp(0x1f, 0x3, 0x6) accept$ax25(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @default, @remote, @default, @rose, @bcast, @default]}, &(0x7f00000001c0)=0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r2, 0xffff}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:52 executing program 5: setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x88, @multicast1, 0x4e23, 0xfdd, 'wlc\x00', 0x8, 0x0, 0x1}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x88, @multicast1, 0x4e23, 0xfdd, 'wlc\x00', 0x8, 0x0, 0x1}, 0x2c) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x682, 0x1, {"4a059162a4f0d3cf60556f846d95d6bd"}, 0x8, 0x2, 0x3a4}, @in6={0xa, 0x4e23, 0x7, @loopback, 0x7fffffff}}}, 0x118) 16:01:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400a9006110ca88f9445ec4c416f142ada92ebd0f0a7300"/34, @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000001c0)={{0xe2, @empty, 0x4e22, 0x3, 'ovf\x00', 0x2, 0x1, 0x20}, {@local, 0x4e22, 0x2000, 0x7, 0x10000, 0x1}}, 0x44) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}]}, 0x98}}, 0x48001) 16:01:52 executing program 4: r0 = socket(0x6, 0xa, 0x1) socket$alg(0x26, 0x5, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(ctr-blowfish-asm,twofish,blake2b-160-generic)\x00'}, 0x58) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:53 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="020025bd43bdda3dfcc1ce00000006001c0006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40050) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @in6={0xa, 0x4e20, 0xdcdf, @mcast2, 0x7}}}, 0x90) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7aa, @remote, 0x3ff}}}, 0x30) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x1d, 0x4, 0xde74, &(0x7f00000004c0)={0xffffffffffffffff}) accept4$ax25(r6, 0x0, &(0x7f0000000500), 0x28a0271d57f9aa22) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="020025bd43bdda3dfcc1ce00000006001c0006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40050) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @in6={0xa, 0x4e20, 0xdcdf, @mcast2, 0x7}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7aa, @remote, 0x3ff}}}, 0x30) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair(0x1d, 0x4, 0xde74, &(0x7f00000004c0)) (async) accept4$ax25(r6, 0x0, &(0x7f0000000500), 0x28a0271d57f9aa22) (async) 16:01:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000240), 0x7fffffff, 0x80) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000340)={0xa, 0x4}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8, 0xfa00, {r4, 0xa291}}, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r5, 0x1}, 0x14}}, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r7, 0xc01064c1, &(0x7f00000003c0)) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x24020081}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20) 16:01:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000000)={r0, 0xfffffffa}) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={0x3, @default, 0xffffffffffffffff}) 16:01:53 executing program 5: setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x88, @multicast1, 0x4e23, 0xfdd, 'wlc\x00', 0x8, 0x0, 0x1}, 0x2c) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x682, 0x1, {"4a059162a4f0d3cf60556f846d95d6bd"}, 0x8, 0x2, 0x3a4}, @in6={0xa, 0x4e23, 0x7, @loopback, 0x7fffffff}}}, 0x118) 16:01:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000000)={r0, 0xfffffffa}) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={0x3, @default, 0xffffffffffffffff}) 16:01:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400a9006110ca88f9445ec4c416f142ada92ebd0f0a7300"/34, @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0) (async, rerun: 32) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000001c0)={{0xe2, @empty, 0x4e22, 0x3, 'ovf\x00', 0x2, 0x1, 0x20}, {@local, 0x4e22, 0x2000, 0x7, 0x10000, 0x1}}, 0x44) (async, rerun: 32) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}]}, 0x98}}, 0x48001) 16:01:53 executing program 4: r0 = socket(0x6, 0xa, 0x1) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(ctr-blowfish-asm,twofish,blake2b-160-generic)\x00'}, 0x58) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:53 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async, rerun: 32) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async, rerun: 32) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0) (rerun: 32) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="020025bd43bdda3dfcc1ce00000006001c0006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40050) (async, rerun: 32) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @in6={0xa, 0x4e20, 0xdcdf, @mcast2, 0x7}}}, 0x90) (rerun: 32) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7aa, @remote, 0x3ff}}}, 0x30) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) socketpair(0x1d, 0x4, 0xde74, &(0x7f00000004c0)={0xffffffffffffffff}) (rerun: 64) accept4$ax25(r6, 0x0, &(0x7f0000000500), 0x28a0271d57f9aa22) [ 1455.364183] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 16:01:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000240), 0x7fffffff, 0x80) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000340)={0xa, 0x4}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8, 0xfa00, {r4, 0xa291}}, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r5, 0x1}, 0x14}}, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r7, 0xc01064c1, &(0x7f00000003c0)) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x24020081}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$audion(&(0x7f0000000240), 0x7fffffff, 0x80) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000340)={0xa, 0x4}, 0xc) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, r3}}, 0x48) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8, 0xfa00, {r4, 0xa291}}, 0x10) (async) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r7, 0xc01064c1, &(0x7f00000003c0)) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x24020081}, 0x10) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20) (async) 16:01:53 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r1, 0x100, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x8, @empty, 0x9}, @ib={0x1b, 0x26c, 0x0, {"ea42aa60c30817685e94b9288cf24d95"}, 0x6, 0x791, 0x6}}}, 0x118) 16:01:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000000)={r0, 0xfffffffa}) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={0x3, @default, 0xffffffffffffffff}) 16:01:53 executing program 4: r0 = socket(0x6, 0xa, 0x1) socket$alg(0x26, 0x5, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(ctr-blowfish-asm,twofish,blake2b-160-generic)\x00'}, 0x58) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 1455.473739] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.485813] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.507205] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 16:01:53 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r1, 0x100, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x8, @empty, 0x9}, @ib={0x1b, 0x26c, 0x0, {"ea42aa60c30817685e94b9288cf24d95"}, 0x6, 0x791, 0x6}}}, 0x118) 16:01:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1, 0x6, 0x330, &(0x7f0000000100)={0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) getpeername$ax25(r1, &(0x7f0000000140)={{}, [@remote, @netrom, @remote, @null, @netrom, @default, @netrom, @default]}, &(0x7f0000000000)=0x48) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) [ 1455.527278] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.536759] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.544736] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 16:01:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = syz_open_dev$audion(&(0x7f0000000240), 0x7fffffff, 0x80) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000340)={0xa, 0x4}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8, 0xfa00, {r4, 0xa291}}, 0x10) (async, rerun: 64) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r5, 0x1}, 0x14}}, 0x0) (rerun: 64) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r7, 0xc01064c1, &(0x7f00000003c0)) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x24020081}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20) [ 1455.568776] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.581054] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 16:01:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x24004091) 16:01:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1, 0x6, 0x330, &(0x7f0000000100)={0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async, rerun: 32) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async, rerun: 32) getpeername$ax25(r1, &(0x7f0000000140)={{}, [@remote, @netrom, @remote, @null, @netrom, @default, @netrom, @default]}, &(0x7f0000000000)=0x48) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) [ 1455.610000] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.647497] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.654866] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.661025] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.669339] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.690782] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.700936] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.710350] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.718813] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.725356] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.733429] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.739564] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.746106] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.752745] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.758726] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.764787] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.770757] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.776805] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.782861] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.788830] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.794977] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.801301] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 16:01:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400a9006110ca88f9445ec4c416f142ada92ebd0f0a7300"/34, @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000001c0)={{0xe2, @empty, 0x4e22, 0x3, 'ovf\x00', 0x2, 0x1, 0x20}, {@local, 0x4e22, 0x2000, 0x7, 0x10000, 0x1}}, 0x44) (async) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}]}, 0x98}}, 0x48001) 16:01:53 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xffffffdc}, 0x1, 0x0, 0x0, 0x810}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="01040000863a2368b91eb9ff453695d7b65aa83ef0331575985d18571464e8207e31084ae3e2310ec98557f8d24ee7212565ed169692e957f4d4126e7419b4eb1ac9250f3d85f84bfc206723dd5061af9406271a38a2600f2ef55ff999aed7b02fe26477988b4d", @ANYRES16=r1, @ANYBLOB="160227bd7000ffdbdf25060000000600010000000000080009000400000006001d00010000000500050001000000"], 0x34}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4) 16:01:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x24004091) 16:01:53 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r1, 0x100, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x8, @empty, 0x9}, @ib={0x1b, 0x26c, 0x0, {"ea42aa60c30817685e94b9288cf24d95"}, 0x6, 0x791, 0x6}}}, 0x118) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r1, 0x100, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x8, @empty, 0x9}, @ib={0x1b, 0x26c, 0x0, {"ea42aa60c30817685e94b9288cf24d95"}, 0x6, 0x791, 0x6}}}, 0x118) (async) 16:01:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1, 0x6, 0x330, &(0x7f0000000100)={0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) getpeername$ax25(r1, &(0x7f0000000140)={{}, [@remote, @netrom, @remote, @null, @netrom, @default, @netrom, @default]}, &(0x7f0000000000)=0x48) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0), r1}}, 0x20) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in={0x2, 0x4e20, @empty}}}, 0x90) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) sendto$ax25(r2, &(0x7f0000000100)="d7633b053cb03644830fcbdf5e22d25696c6235f160a6fec7e25bc9c3034b8f63df43c75f2848fa608a888c0744a65a39ff9f84f8e9934530f7985c405c09feb7acb83c4f81a10a01c874c031dc5254ec285b0d3414ebf111cc05c619de498b369a5", 0x62, 0x800, &(0x7f0000000280)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {r1, 0xff, '+\x00g', "6ee811d3063adbc855ea5f92ebc22f988fdf5f2c7a2f97bc3e13ac40788d5958686c9a3de36bf56825422ff80fe2c791c918997f92bfcc5a7f9e1b71538be088c004d5d14f68da9c171443a3be567fb92b42e9876adf60c64cccd40c5081e3f79ac01c50cb7ccdddf7c823bd3ac86117c0367d164037464baee160a463d8043086656eb133050c4c6510fb11221595f2b5e2b27487666d76f9bbd143f75ad92480e0a521e3deafe6c7e46de08a9672b7e736e33dc3eaa270ffaeecf33fdb9973f998a283635c16faa2460d4fa96431e3b24c779076d9619b8db06c37452128d0f8d8653c9b43e4deddacae481286c1a367bafa357e24289bec30dc7761118fa1"}}, 0x110) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000480)={0xa, 0x4, 0xfa00, {r1}}, 0xc) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, r1}}, 0x30) [ 1455.807325] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.813503] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 [ 1455.819580] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 16:01:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}}, 0x40001) 16:01:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x24004091) 16:01:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x0, [0x1, 0x5, 0x8d]}, &(0x7f0000000000)=0x44) 16:01:53 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xffffffdc}, 0x1, 0x0, 0x0, 0x810}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="01040000863a2368b91eb9ff453695d7b65aa83ef0331575985d18571464e8207e31084ae3e2310ec98557f8d24ee7212565ed169692e957f4d4126e7419b4eb1ac9250f3d85f84bfc206723dd5061af9406271a38a2600f2ef55ff999aed7b02fe26477988b4d", @ANYRES16=r1, @ANYBLOB="160227bd7000ffdbdf25060000000600010000000000080009000400000006001d00010000000500050001000000"], 0x34}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4) 16:01:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@null, @bcast, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @default, @bcast, @default, @null, @bcast]}) [ 1455.892829] IPVS: set_ctl: invalid protocol: 226 0.0.0.0:20002 16:01:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0), r1}}, 0x20) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in={0x2, 0x4e20, @empty}}}, 0x90) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) sendto$ax25(r2, &(0x7f0000000100)="d7633b053cb03644830fcbdf5e22d25696c6235f160a6fec7e25bc9c3034b8f63df43c75f2848fa608a888c0744a65a39ff9f84f8e9934530f7985c405c09feb7acb83c4f81a10a01c874c031dc5254ec285b0d3414ebf111cc05c619de498b369a5", 0x62, 0x800, &(0x7f0000000280)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {r1, 0xff, '+\x00g', "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"}}, 0x110) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000480)={0xa, 0x4, 0xfa00, {r1}}, 0xc) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, r1}}, 0x30) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0), r1}}, 0x20) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in={0x2, 0x4e20, @empty}}}, 0x90) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) sendto$ax25(r2, &(0x7f0000000100)="d7633b053cb03644830fcbdf5e22d25696c6235f160a6fec7e25bc9c3034b8f63df43c75f2848fa608a888c0744a65a39ff9f84f8e9934530f7985c405c09feb7acb83c4f81a10a01c874c031dc5254ec285b0d3414ebf111cc05c619de498b369a5", 0x62, 0x800, &(0x7f0000000280)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {r1, 0xff, '+\x00g', "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"}}, 0x110) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000480)={0xa, 0x4, 0xfa00, {r1}}, 0xc) (async) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, r1}}, 0x30) (async) 16:01:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}}, 0x40001) 16:01:53 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0xfffff522}, {0xa, 0x0, 0x0, @local, 0xfffffe00}, r1}}, 0x48) 16:01:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x0, [0x1, 0x5, 0x8d]}, &(0x7f0000000000)=0x44) 16:01:53 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xffffffdc}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (rerun: 32) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="01040000863a2368b91eb9ff453695d7b65aa83ef0331575985d18571464e8207e31084ae3e2310ec98557f8d24ee7212565ed169692e957f4d4126e7419b4eb1ac9250f3d85f84bfc206723dd5061af9406271a38a2600f2ef55ff999aed7b02fe26477988b4d", @ANYRES16=r1, @ANYBLOB="160227bd7000ffdbdf25060000000600010000000000080009000400000006001d00010000000500050001000000"], 0x34}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4) 16:01:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}}, 0x40001) socket$inet_udp(0x2, 0x2, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}}, 0x40001) (async) 16:01:53 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0xfffff522}, {0xa, 0x0, 0x0, @local, 0xfffffe00}, r1}}, 0x48) 16:01:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@null, @bcast, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @default, @bcast, @default, @null, @bcast]}) (async) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@null, @bcast, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @default, @bcast, @default, @null, @bcast]}) 16:01:53 executing program 4: r0 = socket(0x2, 0xa, 0x4) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x14, r2, 0x621}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r2, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) 16:01:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x0, [0x1, 0x5, 0x8d]}, &(0x7f0000000000)=0x44) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) (async) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x0, [0x1, 0x5, 0x8d]}, &(0x7f0000000000)=0x44) (async) 16:01:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@null, @bcast, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @default, @bcast, @default, @null, @bcast]}) 16:01:53 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0), r1}}, 0x20) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in={0x2, 0x4e20, @empty}}}, 0x90) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) sendto$ax25(r2, &(0x7f0000000100)="d7633b053cb03644830fcbdf5e22d25696c6235f160a6fec7e25bc9c3034b8f63df43c75f2848fa608a888c0744a65a39ff9f84f8e9934530f7985c405c09feb7acb83c4f81a10a01c874c031dc5254ec285b0d3414ebf111cc05c619de498b369a5", 0x62, 0x800, &(0x7f0000000280)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) (async) sendto$ax25(r2, &(0x7f0000000100)="d7633b053cb03644830fcbdf5e22d25696c6235f160a6fec7e25bc9c3034b8f63df43c75f2848fa608a888c0744a65a39ff9f84f8e9934530f7985c405c09feb7acb83c4f81a10a01c874c031dc5254ec285b0d3414ebf111cc05c619de498b369a5", 0x62, 0x800, &(0x7f0000000280)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {r1, 0xff, '+\x00g', "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"}}, 0x110) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) (async) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000480)={0xa, 0x4, 0xfa00, {r1}}, 0xc) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000480)={0xa, 0x4, 0xfa00, {r1}}, 0xc) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, r1}}, 0x30) 16:01:53 executing program 4: socket(0x2, 0xa, 0x4) (async) r0 = socket(0x2, 0xa, 0x4) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x14, r2, 0x621}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r2, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r2, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) 16:01:53 executing program 4: r0 = socket(0x2, 0xa, 0x4) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x14, r2, 0x621}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r2, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) 16:01:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x40840) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x14}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2c}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DEBUG={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x3008753e731dec19}, 0x22000000) 16:01:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4004001, &(0x7f0000000000)={0x2, 0x1, @multicast2}, 0x10) socketpair(0x22, 0xf, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x1}, 0x4) 16:01:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x120, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xc8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7125}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:53 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0xfffff522}, {0xa, 0x0, 0x0, @local, 0xfffffe00}, r1}}, 0x48) 16:01:53 executing program 0: ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000340)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffe9f, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r4 = syz_open_dev$audion(&(0x7f00000001c0), 0x101, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x5, 0x7, "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", 0xf7, 0x0, 0x6, 0x5, 0xe4, 0xd1, 0x1, 0x1}}}, 0x120) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r3, 0x1, 0x1, 0x90}}, 0x20) 16:01:53 executing program 4: r0 = socket(0x26, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x40840) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) (async, rerun: 64) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x14}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2c}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DEBUG={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x3008753e731dec19}, 0x22000000) 16:01:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4004001, &(0x7f0000000000)={0x2, 0x1, @multicast2}, 0x10) (async) socketpair(0x22, 0xf, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x1}, 0x4) 16:01:53 executing program 0: ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000340)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffe9f, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) (async) r4 = syz_open_dev$audion(&(0x7f00000001c0), 0x101, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x5, 0x7, "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", 0xf7, 0x0, 0x6, 0x5, 0xe4, 0xd1, 0x1, 0x1}}}, 0x120) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r3, 0x1, 0x1, 0x90}}, 0x20) 16:01:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x120, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xc8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7125}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x120, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xc8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7125}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) 16:01:53 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x4, @private0, 0x6}, r2}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x120, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xc8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7125}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x120, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xc8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7125}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) 16:01:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4004001, &(0x7f0000000000)={0x2, 0x1, @multicast2}, 0x10) (async) socketpair(0x22, 0xf, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x1}, 0x4) 16:01:54 executing program 0: ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000340)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffe9f, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) (async, rerun: 64) r4 = syz_open_dev$audion(&(0x7f00000001c0), 0x101, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x5, 0x7, "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", 0xf7, 0x0, 0x6, 0x5, 0xe4, 0xd1, 0x1, 0x1}}}, 0x120) (async, rerun: 32) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r3, 0x1, 0x1, 0x90}}, 0x20) (rerun: 32) 16:01:54 executing program 4: r0 = socket(0x26, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:54 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x4, @private0, 0x6}, r2}}, 0x30) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x40840) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x14}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2c}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DEBUG={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x3008753e731dec19}, 0x22000000) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x40840) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x14}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2c}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DEBUG={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x3008753e731dec19}, 0x22000000) (async) 16:01:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(aegis128l-generic)\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) 16:01:54 executing program 4: r0 = socket(0x26, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket(0x26, 0xa, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) 16:01:54 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"2f009eaf0fa938b371b2cd1047e24bf3710d68f342538ee9fd0c94012673f3c0", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000080)={"6cc17be9f1111ba500e1945e2f54ec9c720a133ae39fbcea719dc6a570131643", r1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) 16:01:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048800}, 0x4040014) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20004884) 16:01:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(aegis128l-generic)\x00'}, 0x58) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) 16:01:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0), 0x2, {0xa, 0x4e20, 0x8, @remote, 0x3f}, r1}}, 0x38) 16:01:54 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"2f009eaf0fa938b371b2cd1047e24bf3710d68f342538ee9fd0c94012673f3c0", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000080)={"6cc17be9f1111ba500e1945e2f54ec9c720a133ae39fbcea719dc6a570131643", r1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"2f009eaf0fa938b371b2cd1047e24bf3710d68f342538ee9fd0c94012673f3c0"}) (async) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000080)={"6cc17be9f1111ba500e1945e2f54ec9c720a133ae39fbcea719dc6a570131643", r1}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) (async) 16:01:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048800}, 0x4040014) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20004884) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048800}, 0x4040014) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20004884) (async) 16:01:54 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000000)={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "32f1b6cccda4f93e8502ebf0411e7787d6704841a0872452e1fdf242e43c1773", 0xfff, 0x583, 0x40, 0x400}, 0x3c) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x20}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40804}, 0x40001) 16:01:54 executing program 5: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x4, @private0, 0x6}, r2}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(aegis128l-generic)\x00'}, 0x58) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) 16:01:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0), 0x2, {0xa, 0x4e20, 0x8, @remote, 0x3f}, r1}}, 0x38) 16:01:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={@mcast1, @remote}) 16:01:54 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001e40), 0x2, 0x0) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"2f009eaf0fa938b371b2cd1047e24bf3710d68f342538ee9fd0c94012673f3c0", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000080)={"6cc17be9f1111ba500e1945e2f54ec9c720a133ae39fbcea719dc6a570131643", r1}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) 16:01:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048800}, 0x4040014) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20004884) 16:01:54 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}) (async, rerun: 32) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (rerun: 32) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000000)={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "32f1b6cccda4f93e8502ebf0411e7787d6704841a0872452e1fdf242e43c1773", 0xfff, 0x583, 0x40, 0x400}, 0x3c) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x20}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40804}, 0x40001) 16:01:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0), 0x2, {0xa, 0x4e20, 0x8, @remote, 0x3f}, r1}}, 0x38) 16:01:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={@mcast1, @remote}) 16:01:54 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x4, {0xa, 0x4e21, 0x7ff, @private2={0xfc, 0x2, '\x00', 0x7}, 0x8}, r3}}, 0x38) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x1, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e21, @remote}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:54 executing program 2: write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}}, 0x30) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1, 0xc4d}}, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x854}, 0x4000) 16:01:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xb35}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xbe}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x48}, 0x1, 0x0, 0x0, 0x44014}, 0x20000011) 16:01:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={@mcast1, @remote}) 16:01:54 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000000)={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "32f1b6cccda4f93e8502ebf0411e7787d6704841a0872452e1fdf242e43c1773", 0xfff, 0x583, 0x40, 0x400}, 0x3c) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x20}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40804}, 0x40001) socket(0x2, 0xa, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000000)={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "32f1b6cccda4f93e8502ebf0411e7787d6704841a0872452e1fdf242e43c1773", 0xfff, 0x583, 0x40, 0x400}, 0x3c) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x20}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40804}, 0x40001) (async) 16:01:54 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) (rerun: 32) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x4, {0xa, 0x4e21, 0x7ff, @private2={0xfc, 0x2, '\x00', 0x7}, 0x8}, r3}}, 0x38) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x1, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) (async, rerun: 64) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e21, @remote}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xb35}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xbe}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x48}, 0x1, 0x0, 0x0, 0x44014}, 0x20000011) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xb35}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xbe}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x48}, 0x1, 0x0, 0x0, 0x44014}, 0x20000011) (async) 16:01:54 executing program 2: write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}}, 0x30) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1, 0xc4d}}, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x854}, 0x4000) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}}, 0x30) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) (async) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1, 0xc4d}}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x854}, 0x4000) (async) 16:01:54 executing program 3: sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x1}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)="24f301499c08b86a2a405ca75464ce63969747a8c6325159cdf826d7027a57492da135e634118735e7928f700e39", 0x2e}, {&(0x7f00000000c0)="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", 0xfd}, {&(0x7f00000001c0)="9378b1a905a484ebb88666f3d5958bdb5970adc60422f3c2eecc2fdfedc1bd883e0d85288564dafc2060e4b389773f6c3ad7a687826af16301cf8c8153266bb2500cb066fbf1f0f87eb127a09ba803377b7dc7774b74fab356e51b8638ee80b9b62b08f7b5ca372b98fdae04aa4058ffa374b106744ef89676578e11ad8a36cac882e5a23861dae15724b059cb748e45b500f54f914a097fb232dc59515decc4ae9be6c9fe519676ac0fb31fa46e77071586dd5cee487479f7341225ddaa53790e3a0dcb5c529e8bfbe30fc753e95a", 0xcf}, {&(0x7f00000002c0)="991833c4059c875b9825cc03c13782ca82e49895d7659347b81998a41d3220d7d356c74e28c28b655b270d238b1571a9df6e6ba3c36853383c6666fb238146d1faed9c23f36e72d20583a1ab3be54d", 0x4f}, {&(0x7f0000000340)="8c6bdf3e587d24a91b1ce5b08988a98ee1f08f1a59c8b54981ec0ed7b4e29dd9d9db37e98ad8d206d99c540de73741c1ee31d88388efbf61d7a7a57c7bd1b0dcd47e7ca3570e4e5f354b6c42a5aa7166525c3201a2d75ce0558cd251252d81e8c1db728824eaf638c53d15d628672d5ca10eac06ffc6aca65e2c13a166219e4b0b", 0x81}, {&(0x7f0000000400)="d54ceb0a9d45d4901105b568c035d6a7a4231b0fea753027baee2ec3ab249a352737c520e757ae3c911c23276d413e0fe85310a3862664fcb42ae224f810d1ad65c523b0d13b1a130674a4c2accdc22c7169908804b20832f2bc09500488a165501dd93286d301", 0x67}], 0x6, &(0x7f0000000500)="1cc03cf56cdbb6685ff769b2d91f3944fb2122096f72b982540d20ac4bd82cf52870ebd970fab25140714f335cf2e2c7e19f565817c9f408f2b96f7b6f4eceb694232222a137113f3433346ce78598e04766731c9109eee395f66283feec2897b5fec8", 0x63, 0x4000000}, 0x80) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4810}, 0x4004000) 16:01:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:54 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xec}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x497}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xd2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$tipc(r0, &(0x7f0000001180)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x2, 0x3}, 0x3}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="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", 0x1000}], 0x1, &(0x7f0000001100)="d13b0d0899d27807ad4ec1cc11c682e43432d1032d293a86af61c431a7f9d5118be9abef9482add8f220c4f8f1af65351e48b1815c4a321194cf92d5f67a7d0a84fdd94a64e5ad2e29f71e014c35356578c3ec7a", 0x54, 0x4}, 0x8091) 16:01:54 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x4, {0xa, 0x4e21, 0x7ff, @private2={0xfc, 0x2, '\x00', 0x7}, 0x8}, r3}}, 0x38) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x1, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001e40), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e21, @remote}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:54 executing program 3: sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x1}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)="24f301499c08b86a2a405ca75464ce63969747a8c6325159cdf826d7027a57492da135e634118735e7928f700e39", 0x2e}, {&(0x7f00000000c0)="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", 0xfd}, {&(0x7f00000001c0)="9378b1a905a484ebb88666f3d5958bdb5970adc60422f3c2eecc2fdfedc1bd883e0d85288564dafc2060e4b389773f6c3ad7a687826af16301cf8c8153266bb2500cb066fbf1f0f87eb127a09ba803377b7dc7774b74fab356e51b8638ee80b9b62b08f7b5ca372b98fdae04aa4058ffa374b106744ef89676578e11ad8a36cac882e5a23861dae15724b059cb748e45b500f54f914a097fb232dc59515decc4ae9be6c9fe519676ac0fb31fa46e77071586dd5cee487479f7341225ddaa53790e3a0dcb5c529e8bfbe30fc753e95a", 0xcf}, {&(0x7f00000002c0)="991833c4059c875b9825cc03c13782ca82e49895d7659347b81998a41d3220d7d356c74e28c28b655b270d238b1571a9df6e6ba3c36853383c6666fb238146d1faed9c23f36e72d20583a1ab3be54d", 0x4f}, {&(0x7f0000000340)="8c6bdf3e587d24a91b1ce5b08988a98ee1f08f1a59c8b54981ec0ed7b4e29dd9d9db37e98ad8d206d99c540de73741c1ee31d88388efbf61d7a7a57c7bd1b0dcd47e7ca3570e4e5f354b6c42a5aa7166525c3201a2d75ce0558cd251252d81e8c1db728824eaf638c53d15d628672d5ca10eac06ffc6aca65e2c13a166219e4b0b", 0x81}, {&(0x7f0000000400)="d54ceb0a9d45d4901105b568c035d6a7a4231b0fea753027baee2ec3ab249a352737c520e757ae3c911c23276d413e0fe85310a3862664fcb42ae224f810d1ad65c523b0d13b1a130674a4c2accdc22c7169908804b20832f2bc09500488a165501dd93286d301", 0x67}], 0x6, &(0x7f0000000500)="1cc03cf56cdbb6685ff769b2d91f3944fb2122096f72b982540d20ac4bd82cf52870ebd970fab25140714f335cf2e2c7e19f565817c9f408f2b96f7b6f4eceb694232222a137113f3433346ce78598e04766731c9109eee395f66283feec2897b5fec8", 0x63, 0x4000000}, 0x80) (async, rerun: 64) r0 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4810}, 0x4004000) 16:01:54 executing program 2: write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}}, 0x30) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) (async) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1, 0xc4d}}, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x854}, 0x4000) 16:01:54 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xec}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x497}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xd2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) sendmsg$tipc(r0, &(0x7f0000001180)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x2, 0x3}, 0x3}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="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", 0x1000}], 0x1, &(0x7f0000001100)="d13b0d0899d27807ad4ec1cc11c682e43432d1032d293a86af61c431a7f9d5118be9abef9482add8f220c4f8f1af65351e48b1815c4a321194cf92d5f67a7d0a84fdd94a64e5ad2e29f71e014c35356578c3ec7a", 0x54, 0x4}, 0x8091) 16:01:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xb35}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xbe}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x48}, 0x1, 0x0, 0x0, 0x44014}, 0x20000011) 16:01:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:54 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r1, 0x9, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @broadcast}}}, 0x118) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000400)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:54 executing program 3: sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x1}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)="24f301499c08b86a2a405ca75464ce63969747a8c6325159cdf826d7027a57492da135e634118735e7928f700e39", 0x2e}, {&(0x7f00000000c0)="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", 0xfd}, {&(0x7f00000001c0)="9378b1a905a484ebb88666f3d5958bdb5970adc60422f3c2eecc2fdfedc1bd883e0d85288564dafc2060e4b389773f6c3ad7a687826af16301cf8c8153266bb2500cb066fbf1f0f87eb127a09ba803377b7dc7774b74fab356e51b8638ee80b9b62b08f7b5ca372b98fdae04aa4058ffa374b106744ef89676578e11ad8a36cac882e5a23861dae15724b059cb748e45b500f54f914a097fb232dc59515decc4ae9be6c9fe519676ac0fb31fa46e77071586dd5cee487479f7341225ddaa53790e3a0dcb5c529e8bfbe30fc753e95a", 0xcf}, {&(0x7f00000002c0)="991833c4059c875b9825cc03c13782ca82e49895d7659347b81998a41d3220d7d356c74e28c28b655b270d238b1571a9df6e6ba3c36853383c6666fb238146d1faed9c23f36e72d20583a1ab3be54d", 0x4f}, {&(0x7f0000000340)="8c6bdf3e587d24a91b1ce5b08988a98ee1f08f1a59c8b54981ec0ed7b4e29dd9d9db37e98ad8d206d99c540de73741c1ee31d88388efbf61d7a7a57c7bd1b0dcd47e7ca3570e4e5f354b6c42a5aa7166525c3201a2d75ce0558cd251252d81e8c1db728824eaf638c53d15d628672d5ca10eac06ffc6aca65e2c13a166219e4b0b", 0x81}, {&(0x7f0000000400)="d54ceb0a9d45d4901105b568c035d6a7a4231b0fea753027baee2ec3ab249a352737c520e757ae3c911c23276d413e0fe85310a3862664fcb42ae224f810d1ad65c523b0d13b1a130674a4c2accdc22c7169908804b20832f2bc09500488a165501dd93286d301", 0x67}], 0x6, &(0x7f0000000500)="1cc03cf56cdbb6685ff769b2d91f3944fb2122096f72b982540d20ac4bd82cf52870ebd970fab25140714f335cf2e2c7e19f565817c9f408f2b96f7b6f4eceb694232222a137113f3433346ce78598e04766731c9109eee395f66283feec2897b5fec8", 0x63, 0x4000000}, 0x80) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4810}, 0x4004000) 16:01:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000340)={0xc, 0x8, 0xfa00, {&(0x7f00000001c0)}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e22, @empty}}}, 0x90) 16:01:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r1, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x100}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x8050) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r3, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x2e}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {r5, 0x2, "f2c8e0", "7cefe55b5e6140f438d7e3339d23466bf221e1f3f6d90acbc7d328df8737ee77e792a7c6cc17acb711ce45ce67ae6b26e8744dc2a227f2bee734363c2a75f5679856bd50745cd6d1f16ab988991022ea9c16f00950b1ce125912b6ffef7cae25472d31eaf45ef5a260b54c3408de8692d4cdd9b4b6283e0bf67884e85254867a71d0a6992c0b3ad1ed64f7df28c6f2ade7a0a87bfa2d1d64a2b791333ebe68fad7044c20c50df76865bc8abec3e86bed768a8cfa59ec3c3b7481488262e543dfe9b1161991004ccc407d943ea4d8e5502f5df33d1e69f5c722a453a3f120f3bfcddf5308ce297620b7f56dcab41f5506d35bc10d512242918ec1b41323ffad21"}}, 0x110) r6 = socket(0x6, 0x3, 0x200) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r3, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x180}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0xc000881) 16:01:54 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xec}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x497}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xd2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$tipc(r0, &(0x7f0000001180)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x2, 0x3}, 0x3}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="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", 0x1000}], 0x1, &(0x7f0000001100)="d13b0d0899d27807ad4ec1cc11c682e43432d1032d293a86af61c431a7f9d5118be9abef9482add8f220c4f8f1af65351e48b1815c4a321194cf92d5f67a7d0a84fdd94a64e5ad2e29f71e014c35356578c3ec7a", 0x54, 0x4}, 0x8091) 16:01:54 executing program 3: setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x15}, @multicast1, 0xffffffffffffffff, "c3e1d2f7005cdb62d10b3524059c43e7446ac098e6ff297e788a53a389751554", 0x1, 0x7, 0x3, 0x4}, 0x3c) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20044881, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000100)={@none, 0x7}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) accept$alg(r1, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) sendto$ax25(r1, &(0x7f0000000000)="becf2983f03c7ae0c1284d2ccdf3479f8187fb43d3ce2002e786e44e76b57ee47eb2311eadbd9b08f88681071ad22759f1cb1563d9ed52e264430000000000", 0x3f, 0x0, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 16:01:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r1, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x100}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x8050) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r3, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x2e}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {r5, 0x2, "f2c8e0", "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"}}, 0x110) (async) r6 = socket(0x6, 0x3, 0x200) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r3, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x180}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0xc000881) 16:01:54 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000001000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc810}, 0x0) 16:01:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000000)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x44}) 16:01:54 executing program 3: setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x15}, @multicast1, 0xffffffffffffffff, "c3e1d2f7005cdb62d10b3524059c43e7446ac098e6ff297e788a53a389751554", 0x1, 0x7, 0x3, 0x4}, 0x3c) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20044881, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000100)={@none, 0x7}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) accept$alg(r1, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) sendto$ax25(r1, &(0x7f0000000000)="becf2983f03c7ae0c1284d2ccdf3479f8187fb43d3ce2002e786e44e76b57ee47eb2311eadbd9b08f88681071ad22759f1cb1563d9ed52e264430000000000", 0x3f, 0x0, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x15}, @multicast1, 0xffffffffffffffff, "c3e1d2f7005cdb62d10b3524059c43e7446ac098e6ff297e788a53a389751554", 0x1, 0x7, 0x3, 0x4}, 0x3c) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0x20044881, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000100)={@none, 0x7}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) accept$alg(r1, 0x0, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async) sendto$ax25(r1, &(0x7f0000000000)="becf2983f03c7ae0c1284d2ccdf3479f8187fb43d3ce2002e786e44e76b57ee47eb2311eadbd9b08f88681071ad22759f1cb1563d9ed52e264430000000000", 0x3f, 0x0, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) 16:01:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r1, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x100}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x8050) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r3, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x2e}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {r5, 0x2, "f2c8e0", "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"}}, 0x110) r6 = socket(0x6, 0x3, 0x200) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r3, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x180}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0xc000881) 16:01:54 executing program 4: r0 = socket(0x2, 0xa, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000001000000"], 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc810}, 0x0) 16:01:55 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r1, 0x9, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @broadcast}}}, 0x118) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000400)}}, 0x10) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:55 executing program 4: r0 = socket(0x2, 0xa, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000001000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async, rerun: 32) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r2, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) (async, rerun: 32) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc810}, 0x0) 16:01:55 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000340)={0xc, 0x8, 0xfa00, {&(0x7f00000001c0)}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e22, @empty}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e22, @empty}}}, 0x90) 16:01:55 executing program 3: setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x15}, @multicast1, 0xffffffffffffffff, "c3e1d2f7005cdb62d10b3524059c43e7446ac098e6ff297e788a53a389751554", 0x1, 0x7, 0x3, 0x4}, 0x3c) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20044881, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000100)={@none, 0x7}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) accept$alg(r1, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) sendto$ax25(r1, &(0x7f0000000000)="becf2983f03c7ae0c1284d2ccdf3479f8187fb43d3ce2002e786e44e76b57ee47eb2311eadbd9b08f88681071ad22759f1cb1563d9ed52e264430000000000", 0x3f, 0x0, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x15}, @multicast1, 0xffffffffffffffff, "c3e1d2f7005cdb62d10b3524059c43e7446ac098e6ff297e788a53a389751554", 0x1, 0x7, 0x3, 0x4}, 0x3c) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0x20044881, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000100)={@none, 0x7}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) accept$alg(r1, 0x0, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async) sendto$ax25(r1, &(0x7f0000000000)="becf2983f03c7ae0c1284d2ccdf3479f8187fb43d3ce2002e786e44e76b57ee47eb2311eadbd9b08f88681071ad22759f1cb1563d9ed52e264430000000000", 0x3f, 0x0, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) 16:01:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000000)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x44}) 16:01:55 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000040)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="146ba500", @ANYBLOB="0c58a27ac48dd03279715683184bc95adeafb8ed58cf1a7109157c29e62c638a2dae7a6a62c2e287e8f4c4332300bb208028d84fb91966b29bc4bc1b6885ae46f3c8c1e8cb42256475bcf5d8776269b85ce66d846e976ce4f88a9d5248c0266a412c7a0e9cb510a986240d111edb5d212c5b52dd8aeabbee77c61a7e7aa9fd52ceeff5b953c62edb9cbbb7236e1b6e6a0d672ba50288d3a50c9d83a825eff4170bdcb6fff364c52a0c6fa6c8750aa86010cee36888eca5d18bc53e22f4", @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r1, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8004) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r5, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffff20}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6386}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r3, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000617c0bb23888ff724cae8acd7e52fc7ec247360fa1dc17", @ANYRES16=r3, @ANYBLOB="00022cbd7000fbdbdf25050000000c001600010400000000000006001c008000000014000800776c616e3000"/54], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8080) 16:01:55 executing program 4: r0 = socket(0x2, 0xa, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{}, {@none}, {}, {@fixed}, {@none}, {@none}]}) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0008000448f59c403453b38ebcd91307045b7a249120f4129df4ea6720f6b23fc6c0595aa2fceb0b19a200255730486749f01ada3af50c68ff615ed818e3917eb50354ef41f80f00021a6b52", @ANYRES16=0x0, @ANYBLOB="000226bd7000fbdbdf25040000000900010073797a32000000000900030073797a30000000000500040002000000"], 0x34}}, 0x4000) r1 = syz_open_dev$audion(&(0x7f0000000b80), 0x2, 0x40040) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000c00)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000c80)={0x16, 0x98, 0xfa00, {&(0x7f0000000bc0), 0x1, r2, 0x1c, 0x0, @ib={0x1b, 0xa7c, 0x10000, {"46dc025d8591a414bf1c11ec4baaf3dc"}, 0x8a, 0x0, 0x1ff}}}, 0xa0) sendmsg$tipc(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000400)="7681403c141b4ffb3f3915aac1b13e536702b82775c554f625284c4c1cd44238881bea9a5a74e22b3094288fbda75212e17de3101e2b29bc40143fbbab622e7cb565c499af", 0x45}, {&(0x7f0000000480)="79e197bcd6ecc0bd14e3ff7b9e6fb7d496183c14d11ea93fef78e9e31ca3943f4067fb6351dfe77d4ad1eefd0a61649c5f4d73013617785e9686f7a2d0103e5be4dd2b67c6318c98897a", 0x4a}, {&(0x7f0000000500)="9ec3a108a783f0745b43c5b05cc5084fb866f173d19844b1d4cc6421098a39fd8ce4428e3df7ad3fb23c858e3e31ce3ad9dacbc5eae8bfe15a6b3ede0a3ff8a4bab9c53729159e8916e15d81c116893bfc47bdb26a203b50569b5c4ef9148bc5ec67c9dd28f81b04c12bef33fff938eaf00a0fb9db0022e3ae34c12986855a9a9576a29b46d0fcc7fe5a2f0ef9e1caadfbcc4587efdb842b95d93a8a92d34d290c1f6fc906b40c6646a4321373592ddf62fac72a1f97fbe62eb1a511fd5b", 0xbe}, {&(0x7f00000005c0)="7f41fd089d70cfdef11b3839752070b00cabbefe3933c671e56998491be5ce27bc373f65bf2babb829d898250bef097260c5fb38665693b5cd7cb285c8efb2f4803bf9d90ab66d62d1ecfd04b0e2322f8c868f62da3a4f35ace92c2c5e3c0a6a24b8df89ba3772c4806c4d616a4be2ffe0d7149e21a891942eeb38150a1da1f34bf1c860233a66be2aa61db774988a77ecb11b797819f586f703dfa7a67265130e0964f0cb3c08c5f0e70e25c99dec82d2ed122595cdbb132d53aafa213156b421e32a8197098b537053236ab306abd0290573fb1b2cc14ffc08bf96e315a21618a211ee4072dc83d62f37c4ae10070d", 0xf0}, {&(0x7f00000006c0)="41df9826b882461113ed7aa45588c0b5e07019164f732827523a6f9d85ebbf7b13b25f220e31581df061eae5c4a631d40b4a550709a96d8482e4755ab153edcc68f57dd3fecb0a567c352a1b332ea1da3af311b8c13282e1761f7839a03ff91c9195e0a32d20e6cffc804e51ea03239fcb76ab58f8759b6116107adf9fa96420daed0b175a41ca3d3c5e74ad469b402488a058c009f2c4722fb7db2de04f30cef3c8ea6cf357b320a21d32374e19f5599f69ec74384ba760a5aff52acb0581dbfc357c11d52912f0985fc62ad0c5612b09d3d480f799bb92dbc95b0b3180e6ce12417863f7914e5d6262", 0xea}, {&(0x7f00000007c0)="96602e889aa543a3ad7ecad6201f11e9d3cb0d322991c977df25284b4f74fd6ed6e618e25de35952a8b6460a4cd86aae65429bb60254c74a109daeacacd404132787054b0f7a5d7c3d4051ffba0ee5b2092e20af8f76eae044340058d00d8179201cf380", 0x64}, {&(0x7f0000000840)="7730df7eb0a9148c16fa58c17136da3f6a6744803cf85568b8e13c02ba0265be94485820441df0ff5e96c121d8ff3d1d3e620de47dfbdea29cd7e8cadf0598c44133daf0492b68e60d0c96788bde330e8d85a54a3b1e6acfad1b4809d9aa354c3edf54b8d1845062c3d5a85733d9b922202178d4bee1ba5f4f84e40b9534a840914177735be442c50aa7daff4cb26469aee3d1d09cf96b4f57224847f14da8378d9dae06d2faedd0ad15b2daa6a1902b3ba68c257048863220f337bcd86f3256ba5fee4a", 0xc4}, {&(0x7f0000000940)="f6cf5ce80cadaf18f786a552b1673ca28c8c928fc432bf8ea7389d330762b358a52e189b832077d1c95a85fdd635145d25fe541b1c61226cfac110", 0x3b}, {&(0x7f0000000980)="69d71a8a690a5ed2199b1446bd41f26b2a4e6a15d6b039318b4c29b3938f96bbac96da54775c4fb51a2473f0ed6649812f02b4a6906acc6c2e0647c7ace790c8f2558ff589a351c05dd897904b89562573479b15afe6d16b9d97f54010671b69b4580b0fa738da9eb94e626d24af513820d53a66e77474cedf32b198bb838ee439c15909b3a5bff8a04c03825c7fb3d2d09188614acc629fa5726d5b7356008878274c9e87f13c0fdbba9b8f41be", 0xae}], 0x9, &(0x7f0000000b00)="3ce9a26f51449316c877e30632d466735138a2ce34f155800780cc4f86aab8120cbc3187f1df8130109042372e7bc348d3", 0x31, 0x4000094}, 0x20040840) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x75deb4bddcd9987e, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x20000005) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:55 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000040)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="146ba500", @ANYBLOB="0c58a27ac48dd03279715683184bc95adeafb8ed58cf1a7109157c29e62c638a2dae7a6a62c2e287e8f4c4332300bb208028d84fb91966b29bc4bc1b6885ae46f3c8c1e8cb42256475bcf5d8776269b85ce66d846e976ce4f88a9d5248c0266a412c7a0e9cb510a986240d111edb5d212c5b52dd8aeabbee77c61a7e7aa9fd52ceeff5b953c62edb9cbbb7236e1b6e6a0d672ba50288d3a50c9d83a825eff4170bdcb6fff364c52a0c6fa6c8750aa86010cee36888eca5d18bc53e22f4", @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r1, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8004) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async, rerun: 32) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r5, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffff20}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6386}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r3, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000617c0bb23888ff724cae8acd7e52fc7ec247360fa1dc17", @ANYRES16=r3, @ANYBLOB="00022cbd7000fbdbdf25050000000c001600010400000000000006001c008000000014000800776c616e3000"/54], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8080) 16:01:55 executing program 4: r0 = socket(0x2, 0xa, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{}, {@none}, {}, {@fixed}, {@none}, {@none}]}) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0008000448f59c403453b38ebcd91307045b7a249120f4129df4ea6720f6b23fc6c0595aa2fceb0b19a200255730486749f01ada3af50c68ff615ed818e3917eb50354ef41f80f00021a6b52", @ANYRES16=0x0, @ANYBLOB="000226bd7000fbdbdf25040000000900010073797a32000000000900030073797a30000000000500040002000000"], 0x34}}, 0x4000) (async) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0008000448f59c403453b38ebcd91307045b7a249120f4129df4ea6720f6b23fc6c0595aa2fceb0b19a200255730486749f01ada3af50c68ff615ed818e3917eb50354ef41f80f00021a6b52", @ANYRES16=0x0, @ANYBLOB="000226bd7000fbdbdf25040000000900010073797a32000000000900030073797a30000000000500040002000000"], 0x34}}, 0x4000) syz_open_dev$audion(&(0x7f0000000b80), 0x2, 0x40040) (async) r1 = syz_open_dev$audion(&(0x7f0000000b80), 0x2, 0x40040) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000c00)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000c80)={0x16, 0x98, 0xfa00, {&(0x7f0000000bc0), 0x1, r2, 0x1c, 0x0, @ib={0x1b, 0xa7c, 0x10000, {"46dc025d8591a414bf1c11ec4baaf3dc"}, 0x8a, 0x0, 0x1ff}}}, 0xa0) sendmsg$tipc(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000400)="7681403c141b4ffb3f3915aac1b13e536702b82775c554f625284c4c1cd44238881bea9a5a74e22b3094288fbda75212e17de3101e2b29bc40143fbbab622e7cb565c499af", 0x45}, {&(0x7f0000000480)="79e197bcd6ecc0bd14e3ff7b9e6fb7d496183c14d11ea93fef78e9e31ca3943f4067fb6351dfe77d4ad1eefd0a61649c5f4d73013617785e9686f7a2d0103e5be4dd2b67c6318c98897a", 0x4a}, {&(0x7f0000000500)="9ec3a108a783f0745b43c5b05cc5084fb866f173d19844b1d4cc6421098a39fd8ce4428e3df7ad3fb23c858e3e31ce3ad9dacbc5eae8bfe15a6b3ede0a3ff8a4bab9c53729159e8916e15d81c116893bfc47bdb26a203b50569b5c4ef9148bc5ec67c9dd28f81b04c12bef33fff938eaf00a0fb9db0022e3ae34c12986855a9a9576a29b46d0fcc7fe5a2f0ef9e1caadfbcc4587efdb842b95d93a8a92d34d290c1f6fc906b40c6646a4321373592ddf62fac72a1f97fbe62eb1a511fd5b", 0xbe}, {&(0x7f00000005c0)="7f41fd089d70cfdef11b3839752070b00cabbefe3933c671e56998491be5ce27bc373f65bf2babb829d898250bef097260c5fb38665693b5cd7cb285c8efb2f4803bf9d90ab66d62d1ecfd04b0e2322f8c868f62da3a4f35ace92c2c5e3c0a6a24b8df89ba3772c4806c4d616a4be2ffe0d7149e21a891942eeb38150a1da1f34bf1c860233a66be2aa61db774988a77ecb11b797819f586f703dfa7a67265130e0964f0cb3c08c5f0e70e25c99dec82d2ed122595cdbb132d53aafa213156b421e32a8197098b537053236ab306abd0290573fb1b2cc14ffc08bf96e315a21618a211ee4072dc83d62f37c4ae10070d", 0xf0}, {&(0x7f00000006c0)="41df9826b882461113ed7aa45588c0b5e07019164f732827523a6f9d85ebbf7b13b25f220e31581df061eae5c4a631d40b4a550709a96d8482e4755ab153edcc68f57dd3fecb0a567c352a1b332ea1da3af311b8c13282e1761f7839a03ff91c9195e0a32d20e6cffc804e51ea03239fcb76ab58f8759b6116107adf9fa96420daed0b175a41ca3d3c5e74ad469b402488a058c009f2c4722fb7db2de04f30cef3c8ea6cf357b320a21d32374e19f5599f69ec74384ba760a5aff52acb0581dbfc357c11d52912f0985fc62ad0c5612b09d3d480f799bb92dbc95b0b3180e6ce12417863f7914e5d6262", 0xea}, {&(0x7f00000007c0)="96602e889aa543a3ad7ecad6201f11e9d3cb0d322991c977df25284b4f74fd6ed6e618e25de35952a8b6460a4cd86aae65429bb60254c74a109daeacacd404132787054b0f7a5d7c3d4051ffba0ee5b2092e20af8f76eae044340058d00d8179201cf380", 0x64}, {&(0x7f0000000840)="7730df7eb0a9148c16fa58c17136da3f6a6744803cf85568b8e13c02ba0265be94485820441df0ff5e96c121d8ff3d1d3e620de47dfbdea29cd7e8cadf0598c44133daf0492b68e60d0c96788bde330e8d85a54a3b1e6acfad1b4809d9aa354c3edf54b8d1845062c3d5a85733d9b922202178d4bee1ba5f4f84e40b9534a840914177735be442c50aa7daff4cb26469aee3d1d09cf96b4f57224847f14da8378d9dae06d2faedd0ad15b2daa6a1902b3ba68c257048863220f337bcd86f3256ba5fee4a", 0xc4}, {&(0x7f0000000940)="f6cf5ce80cadaf18f786a552b1673ca28c8c928fc432bf8ea7389d330762b358a52e189b832077d1c95a85fdd635145d25fe541b1c61226cfac110", 0x3b}, {&(0x7f0000000980)="69d71a8a690a5ed2199b1446bd41f26b2a4e6a15d6b039318b4c29b3938f96bbac96da54775c4fb51a2473f0ed6649812f02b4a6906acc6c2e0647c7ace790c8f2558ff589a351c05dd897904b89562573479b15afe6d16b9d97f54010671b69b4580b0fa738da9eb94e626d24af513820d53a66e77474cedf32b198bb838ee439c15909b3a5bff8a04c03825c7fb3d2d09188614acc629fa5726d5b7356008878274c9e87f13c0fdbba9b8f41be", 0xae}], 0x9, &(0x7f0000000b00)="3ce9a26f51449316c877e30632d466735138a2ce34f155800780cc4f86aab8120cbc3187f1df8130109042372e7bc348d3", 0x31, 0x4000094}, 0x20040840) (async) sendmsg$tipc(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000400)="7681403c141b4ffb3f3915aac1b13e536702b82775c554f625284c4c1cd44238881bea9a5a74e22b3094288fbda75212e17de3101e2b29bc40143fbbab622e7cb565c499af", 0x45}, {&(0x7f0000000480)="79e197bcd6ecc0bd14e3ff7b9e6fb7d496183c14d11ea93fef78e9e31ca3943f4067fb6351dfe77d4ad1eefd0a61649c5f4d73013617785e9686f7a2d0103e5be4dd2b67c6318c98897a", 0x4a}, {&(0x7f0000000500)="9ec3a108a783f0745b43c5b05cc5084fb866f173d19844b1d4cc6421098a39fd8ce4428e3df7ad3fb23c858e3e31ce3ad9dacbc5eae8bfe15a6b3ede0a3ff8a4bab9c53729159e8916e15d81c116893bfc47bdb26a203b50569b5c4ef9148bc5ec67c9dd28f81b04c12bef33fff938eaf00a0fb9db0022e3ae34c12986855a9a9576a29b46d0fcc7fe5a2f0ef9e1caadfbcc4587efdb842b95d93a8a92d34d290c1f6fc906b40c6646a4321373592ddf62fac72a1f97fbe62eb1a511fd5b", 0xbe}, {&(0x7f00000005c0)="7f41fd089d70cfdef11b3839752070b00cabbefe3933c671e56998491be5ce27bc373f65bf2babb829d898250bef097260c5fb38665693b5cd7cb285c8efb2f4803bf9d90ab66d62d1ecfd04b0e2322f8c868f62da3a4f35ace92c2c5e3c0a6a24b8df89ba3772c4806c4d616a4be2ffe0d7149e21a891942eeb38150a1da1f34bf1c860233a66be2aa61db774988a77ecb11b797819f586f703dfa7a67265130e0964f0cb3c08c5f0e70e25c99dec82d2ed122595cdbb132d53aafa213156b421e32a8197098b537053236ab306abd0290573fb1b2cc14ffc08bf96e315a21618a211ee4072dc83d62f37c4ae10070d", 0xf0}, {&(0x7f00000006c0)="41df9826b882461113ed7aa45588c0b5e07019164f732827523a6f9d85ebbf7b13b25f220e31581df061eae5c4a631d40b4a550709a96d8482e4755ab153edcc68f57dd3fecb0a567c352a1b332ea1da3af311b8c13282e1761f7839a03ff91c9195e0a32d20e6cffc804e51ea03239fcb76ab58f8759b6116107adf9fa96420daed0b175a41ca3d3c5e74ad469b402488a058c009f2c4722fb7db2de04f30cef3c8ea6cf357b320a21d32374e19f5599f69ec74384ba760a5aff52acb0581dbfc357c11d52912f0985fc62ad0c5612b09d3d480f799bb92dbc95b0b3180e6ce12417863f7914e5d6262", 0xea}, {&(0x7f00000007c0)="96602e889aa543a3ad7ecad6201f11e9d3cb0d322991c977df25284b4f74fd6ed6e618e25de35952a8b6460a4cd86aae65429bb60254c74a109daeacacd404132787054b0f7a5d7c3d4051ffba0ee5b2092e20af8f76eae044340058d00d8179201cf380", 0x64}, {&(0x7f0000000840)="7730df7eb0a9148c16fa58c17136da3f6a6744803cf85568b8e13c02ba0265be94485820441df0ff5e96c121d8ff3d1d3e620de47dfbdea29cd7e8cadf0598c44133daf0492b68e60d0c96788bde330e8d85a54a3b1e6acfad1b4809d9aa354c3edf54b8d1845062c3d5a85733d9b922202178d4bee1ba5f4f84e40b9534a840914177735be442c50aa7daff4cb26469aee3d1d09cf96b4f57224847f14da8378d9dae06d2faedd0ad15b2daa6a1902b3ba68c257048863220f337bcd86f3256ba5fee4a", 0xc4}, {&(0x7f0000000940)="f6cf5ce80cadaf18f786a552b1673ca28c8c928fc432bf8ea7389d330762b358a52e189b832077d1c95a85fdd635145d25fe541b1c61226cfac110", 0x3b}, {&(0x7f0000000980)="69d71a8a690a5ed2199b1446bd41f26b2a4e6a15d6b039318b4c29b3938f96bbac96da54775c4fb51a2473f0ed6649812f02b4a6906acc6c2e0647c7ace790c8f2558ff589a351c05dd897904b89562573479b15afe6d16b9d97f54010671b69b4580b0fa738da9eb94e626d24af513820d53a66e77474cedf32b198bb838ee439c15909b3a5bff8a04c03825c7fb3d2d09188614acc629fa5726d5b7356008878274c9e87f13c0fdbba9b8f41be", 0xae}], 0x9, &(0x7f0000000b00)="3ce9a26f51449316c877e30632d466735138a2ce34f155800780cc4f86aab8120cbc3187f1df8130109042372e7bc348d3", 0x31, 0x4000094}, 0x20040840) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x75deb4bddcd9987e, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x20000005) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000000)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x44}) 16:01:55 executing program 3: setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000000)=0x9, 0x4) socket(0x27, 0x2, 0x10000) 16:01:55 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000040)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="146ba500", @ANYBLOB="0c58a27ac48dd03279715683184bc95adeafb8ed58cf1a7109157c29e62c638a2dae7a6a62c2e287e8f4c4332300bb208028d84fb91966b29bc4bc1b6885ae46f3c8c1e8cb42256475bcf5d8776269b85ce66d846e976ce4f88a9d5248c0266a412c7a0e9cb510a986240d111edb5d212c5b52dd8aeabbee77c61a7e7aa9fd52ceeff5b953c62edb9cbbb7236e1b6e6a0d672ba50288d3a50c9d83a825eff4170bdcb6fff364c52a0c6fa6c8750aa86010cee36888eca5d18bc53e22f4", @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r1, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8004) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r5, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffff20}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6386}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r3, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000617c0bb23888ff724cae8acd7e52fc7ec247360fa1dc17", @ANYRES16=r3, @ANYBLOB="00022cbd7000fbdbdf25050000000c001600010400000000000006001c008000000014000800776c616e3000"/54], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8080) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000040)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="146ba500", @ANYBLOB="0c58a27ac48dd03279715683184bc95adeafb8ed58cf1a7109157c29e62c638a2dae7a6a62c2e287e8f4c4332300bb208028d84fb91966b29bc4bc1b6885ae46f3c8c1e8cb42256475bcf5d8776269b85ce66d846e976ce4f88a9d5248c0266a412c7a0e9cb510a986240d111edb5d212c5b52dd8aeabbee77c61a7e7aa9fd52ceeff5b953c62edb9cbbb7236e1b6e6a0d672ba50288d3a50c9d83a825eff4170bdcb6fff364c52a0c6fa6c8750aa86010cee36888eca5d18bc53e22f4", @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r1, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8004) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00'}) (async) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r5, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffff20}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6386}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r3, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000617c0bb23888ff724cae8acd7e52fc7ec247360fa1dc17", @ANYRES16=r3, @ANYBLOB="00022cbd7000fbdbdf25050000000c001600010400000000000006001c008000000014000800776c616e3000"/54], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8080) (async) 16:01:56 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r1, 0x9, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @broadcast}}}, 0x118) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000400)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:56 executing program 4: r0 = socket(0x2, 0xa, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{}, {@none}, {}, {@fixed}, {@none}, {@none}]}) (async) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0008000448f59c403453b38ebcd91307045b7a249120f4129df4ea6720f6b23fc6c0595aa2fceb0b19a200255730486749f01ada3af50c68ff615ed818e3917eb50354ef41f80f00021a6b52", @ANYRES16=0x0, @ANYBLOB="000226bd7000fbdbdf25040000000900010073797a32000000000900030073797a30000000000500040002000000"], 0x34}}, 0x4000) r1 = syz_open_dev$audion(&(0x7f0000000b80), 0x2, 0x40040) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000c00)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000c80)={0x16, 0x98, 0xfa00, {&(0x7f0000000bc0), 0x1, r2, 0x1c, 0x0, @ib={0x1b, 0xa7c, 0x10000, {"46dc025d8591a414bf1c11ec4baaf3dc"}, 0x8a, 0x0, 0x1ff}}}, 0xa0) (async) sendmsg$tipc(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000400)="7681403c141b4ffb3f3915aac1b13e536702b82775c554f625284c4c1cd44238881bea9a5a74e22b3094288fbda75212e17de3101e2b29bc40143fbbab622e7cb565c499af", 0x45}, {&(0x7f0000000480)="79e197bcd6ecc0bd14e3ff7b9e6fb7d496183c14d11ea93fef78e9e31ca3943f4067fb6351dfe77d4ad1eefd0a61649c5f4d73013617785e9686f7a2d0103e5be4dd2b67c6318c98897a", 0x4a}, {&(0x7f0000000500)="9ec3a108a783f0745b43c5b05cc5084fb866f173d19844b1d4cc6421098a39fd8ce4428e3df7ad3fb23c858e3e31ce3ad9dacbc5eae8bfe15a6b3ede0a3ff8a4bab9c53729159e8916e15d81c116893bfc47bdb26a203b50569b5c4ef9148bc5ec67c9dd28f81b04c12bef33fff938eaf00a0fb9db0022e3ae34c12986855a9a9576a29b46d0fcc7fe5a2f0ef9e1caadfbcc4587efdb842b95d93a8a92d34d290c1f6fc906b40c6646a4321373592ddf62fac72a1f97fbe62eb1a511fd5b", 0xbe}, {&(0x7f00000005c0)="7f41fd089d70cfdef11b3839752070b00cabbefe3933c671e56998491be5ce27bc373f65bf2babb829d898250bef097260c5fb38665693b5cd7cb285c8efb2f4803bf9d90ab66d62d1ecfd04b0e2322f8c868f62da3a4f35ace92c2c5e3c0a6a24b8df89ba3772c4806c4d616a4be2ffe0d7149e21a891942eeb38150a1da1f34bf1c860233a66be2aa61db774988a77ecb11b797819f586f703dfa7a67265130e0964f0cb3c08c5f0e70e25c99dec82d2ed122595cdbb132d53aafa213156b421e32a8197098b537053236ab306abd0290573fb1b2cc14ffc08bf96e315a21618a211ee4072dc83d62f37c4ae10070d", 0xf0}, {&(0x7f00000006c0)="41df9826b882461113ed7aa45588c0b5e07019164f732827523a6f9d85ebbf7b13b25f220e31581df061eae5c4a631d40b4a550709a96d8482e4755ab153edcc68f57dd3fecb0a567c352a1b332ea1da3af311b8c13282e1761f7839a03ff91c9195e0a32d20e6cffc804e51ea03239fcb76ab58f8759b6116107adf9fa96420daed0b175a41ca3d3c5e74ad469b402488a058c009f2c4722fb7db2de04f30cef3c8ea6cf357b320a21d32374e19f5599f69ec74384ba760a5aff52acb0581dbfc357c11d52912f0985fc62ad0c5612b09d3d480f799bb92dbc95b0b3180e6ce12417863f7914e5d6262", 0xea}, {&(0x7f00000007c0)="96602e889aa543a3ad7ecad6201f11e9d3cb0d322991c977df25284b4f74fd6ed6e618e25de35952a8b6460a4cd86aae65429bb60254c74a109daeacacd404132787054b0f7a5d7c3d4051ffba0ee5b2092e20af8f76eae044340058d00d8179201cf380", 0x64}, {&(0x7f0000000840)="7730df7eb0a9148c16fa58c17136da3f6a6744803cf85568b8e13c02ba0265be94485820441df0ff5e96c121d8ff3d1d3e620de47dfbdea29cd7e8cadf0598c44133daf0492b68e60d0c96788bde330e8d85a54a3b1e6acfad1b4809d9aa354c3edf54b8d1845062c3d5a85733d9b922202178d4bee1ba5f4f84e40b9534a840914177735be442c50aa7daff4cb26469aee3d1d09cf96b4f57224847f14da8378d9dae06d2faedd0ad15b2daa6a1902b3ba68c257048863220f337bcd86f3256ba5fee4a", 0xc4}, {&(0x7f0000000940)="f6cf5ce80cadaf18f786a552b1673ca28c8c928fc432bf8ea7389d330762b358a52e189b832077d1c95a85fdd635145d25fe541b1c61226cfac110", 0x3b}, {&(0x7f0000000980)="69d71a8a690a5ed2199b1446bd41f26b2a4e6a15d6b039318b4c29b3938f96bbac96da54775c4fb51a2473f0ed6649812f02b4a6906acc6c2e0647c7ace790c8f2558ff589a351c05dd897904b89562573479b15afe6d16b9d97f54010671b69b4580b0fa738da9eb94e626d24af513820d53a66e77474cedf32b198bb838ee439c15909b3a5bff8a04c03825c7fb3d2d09188614acc629fa5726d5b7356008878274c9e87f13c0fdbba9b8f41be", 0xae}], 0x9, &(0x7f0000000b00)="3ce9a26f51449316c877e30632d466735138a2ce34f155800780cc4f86aab8120cbc3187f1df8130109042372e7bc348d3", 0x31, 0x4000094}, 0x20040840) (async) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x75deb4bddcd9987e, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x20000005) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:56 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000340)={0xc, 0x8, 0xfa00, {&(0x7f00000001c0)}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e22, @empty}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e22, @empty}}}, 0x90) 16:01:56 executing program 3: setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000000)=0x9, 0x4) (async) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000000)=0x9, 0x4) socket(0x27, 0x2, 0x10000) 16:01:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r1, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) 16:01:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) socket$bt_hidp(0x1f, 0x3, 0x6) 16:01:56 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x7b, r2, 0x20, 0x70bd26, 0x8, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x0, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2968}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044}, 0x10) 16:01:56 executing program 3: setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000000)=0x9, 0x4) (async) socket(0x27, 0x2, 0x10000) 16:01:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r1, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) 16:01:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) socket$bt_hidp(0x1f, 0x3, 0x6) 16:01:56 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x7b, r2, 0x20, 0x70bd26, 0x8, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x0, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2968}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044}, 0x10) 16:01:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) socket$bt_hidp(0x1f, 0x3, 0x6) 16:01:57 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0xffff8001, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:57 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xfffffffc, 0x100, 0x8001, 0x1000, 0x1, 0xfc64, '\x00', r0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0x4}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc004}, 0x4801) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$audion(&(0x7f0000000380), 0x7, 0x480380) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000006c0)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r8}}, 0x18) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000400)={0x14, 0x88, 0xfa00, {r8, 0x10, 0x0, @in={0x2, 0x4e22, @broadcast}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {r5, 0x3}}, 0x10) getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r3, 0x1, 0x1, 0x90}}, 0x20) 16:01:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r1, 0x621, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) 16:01:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x26, 0x3, 0xfffffff9) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x0, 0x120, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan1\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004011}, 0x44000) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:57 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x7b, r2, 0x20, 0x70bd26, 0x8, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x0, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2968}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044}, 0x10) socket(0x2, 0xa, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x7b, r2, 0x20, 0x70bd26, 0x8, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x0, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2968}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044}, 0x10) (async) 16:01:57 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xfffffffc, 0x100, 0x8001, 0x1000, 0x1, 0xfc64, '\x00', r0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0x4}, 0x48) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:57 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0xffff8001, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 16:01:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x34004000}, 0x48801) 16:01:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket(0x26, 0x3, 0xfffffff9) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x0, 0x120, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan1\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004011}, 0x44000) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:57 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}]}, 0x30}}, 0x40800) 16:01:57 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0xffff8001, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0xffff8001, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) (async) 16:01:57 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xfffffffc, 0x100, 0x8001, 0x1000, 0x1, 0xfc64, '\x00', r0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0x4}, 0x48) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 16:01:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x34004000}, 0x48801) 16:01:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc004}, 0x4801) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$audion(&(0x7f0000000380), 0x7, 0x480380) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000006c0)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r8}}, 0x18) (async) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000400)={0x14, 0x88, 0xfa00, {r8, 0x10, 0x0, @in={0x2, 0x4e22, @broadcast}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {r5, 0x3}}, 0x10) (async) getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r3, 0x1, 0x1, 0x90}}, 0x20) 16:01:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x26, 0x3, 0xfffffff9) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x0, 0x120, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan1\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004011}, 0x44000) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket(0x26, 0x3, 0xfffffff9) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x0, 0x120, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan1\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004011}, 0x44000) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) 16:01:57 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}]}, 0x30}}, 0x40800) 16:01:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x34004000}, 0x48801) 16:01:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x5a, 0x400) accept$ax25(r1, &(0x7f0000000100)={{0x3, @rose}, [@netrom, @default, @netrom, @netrom, @null, @netrom, @bcast]}, &(0x7f0000000180)=0x48) sendto$inet(r0, 0x0, 0xfffffffffffffd1c, 0x8004, &(0x7f0000000040)={0x2, 0xfffc, @broadcast}, 0x21) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e21, @rand_addr=0x64010101}}, 0x1, 0x1, [{{0x2, 0x4e24, @empty}}]}, 0x110) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000080)=0x1e) 16:01:57 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x80}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r4 = syz_open_dev$audion(&(0x7f0000000080), 0x8f, 0x60000) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000440)={0x11, 0x10, 0xfa00, {&(0x7f0000000400)}}, 0x18) 16:01:57 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}]}, 0x30}}, 0x40800) 16:01:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) syz_open_dev$sndmidi(&(0x7f0000000000), 0x81, 0x20400) 16:01:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44eea95440e9147c}, 0x88c0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:57 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x5c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x4, 'fo\x00', 0x20, 0x401, 0x65}, 0x2c) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{@fixed}]}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000001c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000000240)={0x34, r3, 0x200, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c2}, 0x20040880) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x10, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x8005) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r7}}, 0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000500)={0x5, 0x10, 0xfa00, {&(0x7f0000000300), r7, 0x2}}, 0x18) 16:01:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x5a, 0x400) accept$ax25(r1, &(0x7f0000000100)={{0x3, @rose}, [@netrom, @default, @netrom, @netrom, @null, @netrom, @bcast]}, &(0x7f0000000180)=0x48) (async) sendto$inet(r0, 0x0, 0xfffffffffffffd1c, 0x8004, &(0x7f0000000040)={0x2, 0xfffc, @broadcast}, 0x21) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e21, @rand_addr=0x64010101}}, 0x1, 0x1, [{{0x2, 0x4e24, @empty}}]}, 0x110) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000080)=0x1e) 16:01:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44eea95440e9147c}, 0x88c0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc004}, 0x4801) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$audion(&(0x7f0000000380), 0x7, 0x480380) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000006c0)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r8}}, 0x18) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000400)={0x14, 0x88, 0xfa00, {r8, 0x10, 0x0, @in={0x2, 0x4e22, @broadcast}}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r5}}, 0x18) (async) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {r5, 0x3}}, 0x10) (async) getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r3, 0x1, 0x1, 0x90}}, 0x20) 16:01:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) syz_open_dev$sndmidi(&(0x7f0000000000), 0x81, 0x20400) 16:01:57 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x80}}, 0x10) (async, rerun: 64) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) (rerun: 64) r4 = syz_open_dev$audion(&(0x7f0000000080), 0x8f, 0x60000) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000440)={0x11, 0x10, 0xfa00, {&(0x7f0000000400)}}, 0x18) 16:01:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x5a, 0x400) accept$ax25(r1, &(0x7f0000000100)={{0x3, @rose}, [@netrom, @default, @netrom, @netrom, @null, @netrom, @bcast]}, &(0x7f0000000180)=0x48) (async) sendto$inet(r0, 0x0, 0xfffffffffffffd1c, 0x8004, &(0x7f0000000040)={0x2, 0xfffc, @broadcast}, 0x21) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e21, @rand_addr=0x64010101}}, 0x1, 0x1, [{{0x2, 0x4e24, @empty}}]}, 0x110) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000080)=0x1e) 16:01:57 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44eea95440e9147c}, 0x88c0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 16:01:57 executing program 4: r0 = socket(0x2, 0xa, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x5c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x4, 'fo\x00', 0x20, 0x401, 0x65}, 0x2c) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) (async) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{@fixed}]}) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000001c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000000240)={0x34, r3, 0x200, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c2}, 0x20040880) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x10, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x8005) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r7}}, 0x18) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000500)={0x5, 0x10, 0xfa00, {&(0x7f0000000300), r7, 0x2}}, 0x18) 16:01:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="47f1ed29", 0x4) 16:01:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) syz_open_dev$sndmidi(&(0x7f0000000000), 0x81, 0x20400) 16:01:57 executing program 3: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x7b, r2, 0x20, 0x70bd26, 0x8, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x0, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2968}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044}, 0x10) 16:01:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="47f1ed29", 0x4) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="47f1ed29", 0x4) (async) 16:01:57 executing program 3: r0 = socket(0x2, 0xa, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{}, {@none}, {}, {@fixed}, {@none}, {@none}]}) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0008000448f59c403453b38ebcd91307045b7a249120f4129df4ea6720f6b23fc6c0595aa2fceb0b19a200255730486749f01ada3af50c68ff615ed818e3917eb50354ef41f80f00021a6b52", @ANYRES16=0x0, @ANYBLOB="000226bd7000fbdbdf25040000000900010073797a32000000000900030073797a30000000000500040002000000"], 0x34}}, 0x4000) r1 = syz_open_dev$audion(&(0x7f0000000b80), 0x2, 0x40040) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000c00)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000c80)={0x16, 0x98, 0xfa00, {&(0x7f0000000bc0), 0x1, r2, 0x1c, 0x0, @ib={0x1b, 0xa7c, 0x10000, {"46dc025d8591a414bf1c11ec4baaf3dc"}, 0x8a, 0x0, 0x1ff}}}, 0xa0) sendmsg$tipc(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000400)="7681403c141b4ffb3f3915aac1b13e536702b82775c554f625284c4c1cd44238881bea9a5a74e22b3094288fbda75212e17de3101e2b29bc40143fbbab622e7cb565c499af", 0x45}, {&(0x7f0000000480)="79e197bcd6ecc0bd14e3ff7b9e6fb7d496183c14d11ea93fef78e9e31ca3943f4067fb6351dfe77d4ad1eefd0a61649c5f4d73013617785e9686f7a2d0103e5be4dd2b67c6318c98897a", 0x4a}, {&(0x7f0000000500)="9ec3a108a783f0745b43c5b05cc5084fb866f173d19844b1d4cc6421098a39fd8ce4428e3df7ad3fb23c858e3e31ce3ad9dacbc5eae8bfe15a6b3ede0a3ff8a4bab9c53729159e8916e15d81c116893bfc47bdb26a203b50569b5c4ef9148bc5ec67c9dd28f81b04c12bef33fff938eaf00a0fb9db0022e3ae34c12986855a9a9576a29b46d0fcc7fe5a2f0ef9e1caadfbcc4587efdb842b95d93a8a92d34d290c1f6fc906b40c6646a4321373592ddf62fac72a1f97fbe62eb1a511fd5b", 0xbe}, {&(0x7f00000005c0)="7f41fd089d70cfdef11b3839752070b00cabbefe3933c671e56998491be5ce27bc373f65bf2babb829d898250bef097260c5fb38665693b5cd7cb285c8efb2f4803bf9d90ab66d62d1ecfd04b0e2322f8c868f62da3a4f35ace92c2c5e3c0a6a24b8df89ba3772c4806c4d616a4be2ffe0d7149e21a891942eeb38150a1da1f34bf1c860233a66be2aa61db774988a77ecb11b797819f586f703dfa7a67265130e0964f0cb3c08c5f0e70e25c99dec82d2ed122595cdbb132d53aafa213156b421e32a8197098b537053236ab306abd0290573fb1b2cc14ffc08bf96e315a21618a211ee4072dc83d62f37c4ae10070d", 0xf0}, {&(0x7f00000006c0)="41df9826b882461113ed7aa45588c0b5e07019164f732827523a6f9d85ebbf7b13b25f220e31581df061eae5c4a631d40b4a550709a96d8482e4755ab153edcc68f57dd3fecb0a567c352a1b332ea1da3af311b8c13282e1761f7839a03ff91c9195e0a32d20e6cffc804e51ea03239fcb76ab58f8759b6116107adf9fa96420daed0b175a41ca3d3c5e74ad469b402488a058c009f2c4722fb7db2de04f30cef3c8ea6cf357b320a21d32374e19f5599f69ec74384ba760a5aff52acb0581dbfc357c11d52912f0985fc62ad0c5612b09d3d480f799bb92dbc95b0b3180e6ce12417863f7914e5d6262", 0xea}, {&(0x7f00000007c0)="96602e889aa543a3ad7ecad6201f11e9d3cb0d322991c977df25284b4f74fd6ed6e618e25de35952a8b6460a4cd86aae65429bb60254c74a109daeacacd404132787054b0f7a5d7c3d4051ffba0ee5b2092e20af8f76eae044340058d00d8179201cf380", 0x64}, {&(0x7f0000000840)="7730df7eb0a9148c16fa58c17136da3f6a6744803cf85568b8e13c02ba0265be94485820441df0ff5e96c121d8ff3d1d3e620de47dfbdea29cd7e8cadf0598c44133daf0492b68e60d0c96788bde330e8d85a54a3b1e6acfad1b4809d9aa354c3edf54b8d1845062c3d5a85733d9b922202178d4bee1ba5f4f84e40b9534a840914177735be442c50aa7daff4cb26469aee3d1d09cf96b4f57224847f14da8378d9dae06d2faedd0ad15b2daa6a1902b3ba68c257048863220f337bcd86f3256ba5fee4a", 0xc4}, {&(0x7f0000000940)="f6cf5ce80cadaf18f786a552b1673ca28c8c928fc432bf8ea7389d330762b358a52e189b832077d1c95a85fdd635145d25fe541b1c61226cfac110", 0x3b}, {&(0x7f0000000980)="69d71a8a690a5ed2199b1446bd41f26b2a4e6a15d6b039318b4c29b3938f96bbac96da54775c4fb51a2473f0ed6649812f02b4a6906acc6c2e0647c7ace790c8f2558ff589a351c05dd897904b89562573479b15afe6d16b9d97f54010671b69b4580b0fa738da9eb94e626d24af513820d53a66e77474cedf32b198bb838ee439c15909b3a5bff8a04c03825c7fb3d2d09188614acc629fa5726d5b7356008878274c9e87f13c0fdbba9b8f41be", 0xae}], 0x9, &(0x7f0000000b00)="3ce9a26f51449316c877e30632d466735138a2ce34f155800780cc4f86aab8120cbc3187f1df8130109042372e7bc348d3", 0x31, 0x4000094}, 0x20040840) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x75deb4bddcd9987e, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x20000005) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x841}, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) 16:01:57 executing program 4: socket(0x2, 0xa, 0x0) (async) r0 = socket(0x2, 0xa, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x5c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x4, 'fo\x00', 0x20, 0x401, 0x65}, 0x2c) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001e40), 0x2, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{@fixed}]}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000001c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000000240)={0x34, r3, 0x200, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c2}, 0x20040880) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000001c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000000240)={0x34, r3, 0x200, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c2}, 0x20040880) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x10, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x8005) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r7}}, 0x18) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r7}}, 0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000500)={0x5, 0x10, 0xfa00, {&(0x7f0000000300), r7, 0x2}}, 0x18) 16:01:57 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000002c0)={0x4, "15b55b7040f900"}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000004c0), 0x2, 0x0) r4 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @rose}, [@remote, @default, @null, @rose, @netrom, @remote, @bcast, @bcast]}, &(0x7f0000000400)=0x48, 0x80800) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) accept4$ax25(r4, 0x0, &(0x7f0000000440), 0x800) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001e40), 0x2, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd3, &(0x7f0000000300)={@private=0xa010102, @broadcast, 0x0, "a6d62ae79338649aacfe42162dc80000b57c324360152692ce687e0b1c58d0c3", 0x4, 0x9, 0x3, 0x7}, 0x3c) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r3, 0x200}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 16:01:57 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x80}}, 0x10) (async, rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) (async, rerun: 32) r4 = syz_open_dev$audion(&(0x7f0000000080), 0x8f, 0x60000) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000440)={0x11, 0x10, 0xfa00, {&(0x7f0000000400)}}, 0x18) 16:01:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="47f1ed29", 0x4) 16:01:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x841}, 0x1) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) 16:01:57 executing program 3: r0 = socket(0x2, 0xa, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{}, {@none}, {}, {@fixed}, {@none}, {@none}]}) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0008000448f59c403453b38ebcd91307045b7a249120f4129df4ea6720f6b23fc6c0595aa2fceb0b19a200255730486749f01ada3af50c68ff615ed818e3917eb50354ef41f80f00021a6b52", @ANYRES16=0x0, @ANYBLOB="000226bd7000fbdbdf25040000000900010073797a32000000000900030073797a30000000000500040002000000"], 0x34}}, 0x4000) r1 = syz_open_dev$audion(&(0x7f0000000b80), 0x2, 0x40040) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000c00)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000c80)={0x16, 0x98, 0xfa00, {&(0x7f0000000bc0), 0x1, r2, 0x1c, 0x0, @ib={0x1b, 0xa7c, 0x10000, {"46dc025d8591a414bf1c11ec4baaf3dc"}, 0x8a, 0x0, 0x1ff}}}, 0xa0) sendmsg$tipc(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000400)="7681403c141b4ffb3f3915aac1b13e536702b82775c554f625284c4c1cd44238881bea9a5a74e22b3094288fbda75212e17de3101e2b29bc40143fbbab622e7cb565c499af", 0x45}, {&(0x7f0000000480)="79e197bcd6ecc0bd14e3ff7b9e6fb7d496183c14d11ea93fef78e9e31ca3943f4067fb6351dfe77d4ad1eefd0a61649c5f4d73013617785e9686f7a2d0103e5be4dd2b67c6318c98897a", 0x4a}, {&(0x7f0000000500)="9ec3a108a783f0745b43c5b05cc5084fb866f173d19844b1d4cc6421098a39fd8ce4428e3df7ad3fb23c858e3e31ce3ad9dacbc5eae8bfe15a6b3ede0a3ff8a4bab9c53729159e8916e15d81c116893bfc47bdb26a203b50569b5c4ef9148bc5ec67c9dd28f81b04c12bef33fff938eaf00a0fb9db0022e3ae34c12986855a9a9576a29b46d0fcc7fe5a2f0ef9e1caadfbcc4587efdb842b95d93a8a92d34d290c1f6fc906b40c6646a4321373592ddf62fac72a1f97fbe62eb1a511fd5b", 0xbe}, {&(0x7f00000005c0)="7f41fd089d70cfdef11b3839752070b00cabbefe3933c671e56998491be5ce27bc373f65bf2babb829d898250bef097260c5fb38665693b5cd7cb285c8efb2f4803bf9d90ab66d62d1ecfd04b0e2322f8c868f62da3a4f35ace92c2c5e3c0a6a24b8df89ba3772c4806c4d616a4be2ffe0d7149e21a891942eeb38150a1da1f34bf1c860233a66be2aa61db774988a77ecb11b797819f586f703dfa7a67265130e0964f0cb3c08c5f0e70e25c99dec82d2ed122595cdbb132d53aafa213156b421e32a8197098b537053236ab306abd0290573fb1b2cc14ffc08bf96e315a21618a211ee4072dc83d62f37c4ae10070d", 0xf0}, {&(0x7f00000006c0)="41df9826b882461113ed7aa45588c0b5e07019164f732827523a6f9d85ebbf7b13b25f220e31581df061eae5c4a631d40b4a550709a96d8482e4755ab153edcc68f57dd3fecb0a567c352a1b332ea1da3af311b8c13282e1761f7839a03ff91c9195e0a32d20e6cffc804e51ea03239fcb76ab58f8759b6116107adf9fa96420daed0b175a41ca3d3c5e74ad469b402488a058c009f2c4722fb7db2de04f30cef3c8ea6cf357b320a21d32374e19f5599f69ec74384ba760a5aff52acb0581dbfc357c11d52912f0985fc62ad0c5612b09d3d480f799bb92dbc95b0b3180e6ce12417863f7914e5d6262", 0xea}, {&(0x7f00000007c0)="96602e889aa543a3ad7ecad6201f11e9d3cb0d322991c977df25284b4f74fd6ed6e618e25de35952a8b6460a4cd86aae65429bb60254c74a109daeacacd404132787054b0f7a5d7c3d4051ffba0ee5b2092e20af8f76eae044340058d00d8179201cf380", 0x64}, {&(0x7f0000000840)="7730df7eb0a9148c16fa58c17136da3f6a6744803cf85568b8e13c02ba0265be94485820441df0ff5e96c121d8ff3d1d3e620de47dfbdea29cd7e8cadf0598c44133daf0492b68e60d0c96788bde330e8d85a54a3b1e6acfad1b4809d9aa354c3edf54b8d1845062c3d5a85733d9b922202178d4bee1ba5f4f84e40b9534a840914177735be442c50aa7daff4cb26469aee3d1d09cf96b4f57224847f14da8378d9dae06d2faedd0ad15b2daa6a1902b3ba68c257048863220f337bcd86f3256ba5fee4a", 0xc4}, {&(0x7f0000000940)="f6cf5ce80cadaf18f786a552b1673ca28c8c928fc432bf8ea7389d330762b358a52e189b832077d1c95a85fdd635145d25fe541b1c61226cfac110", 0x3b}, {&(0x7f0000000980)="69d71a8a690a5ed2199b1446bd41f26b2a4e6a15d6b039318b4c29b3938f96bbac96da54775c4fb51a2473f0ed6649812f02b4a6906acc6c2e0647c7ace790c8f2558ff589a351c05dd897904b89562573479b15afe6d16b9d97f54010671b69b4580b0fa738da9eb94e626d24af513820d53a66e77474cedf32b198bb838ee439c15909b3a5bff8a04c03825c7fb3d2d09188614acc629fa5726d5b7356008878274c9e87f13c0fdbba9b8f41be", 0xae}], 0x9, &(0x7f0000000b00)="3ce9a26f51449316c877e30632d466735138a2ce34f155800780cc4f86aab8120cbc3187f1df8130109042372e7bc348d3", 0x31, 0x4000094}, 0x20040840) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x75deb4bddcd9987e, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x20000005) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:57 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0xffffffffffff43c9, 0x90040) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 16:01:57 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x20}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf5}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xf}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x7ff}, @jmp={0x5, 0x0, 0x7, 0x6, 0x9, 0xca9386ddecd0e1be, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit]}, &(0x7f0000000240)='syzkaller\x00', 0x2, 0xf9, &(0x7f0000000280)=""/249, 0xafd72af2e7387341, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x4, 0x6, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f0000000000)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="09185375fc01ebbc44392f24f829752eb2020005000000"], &(0x7f0000000040)='GPL\x00', 0x6, 0x1f, &(0x7f0000000100)=""/31, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x7, 0x5, 0x1ac80000}, 0x10, 0x468d, r1, 0x0, &(0x7f00000004c0)=[0x1, 0x1]}, 0x80) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:57 executing program 3: r0 = socket(0x2, 0xa, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{}, {@none}, {}, {@fixed}, {@none}, {@none}]}) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0008000448f59c403453b38ebcd91307045b7a249120f4129df4ea6720f6b23fc6c0595aa2fceb0b19a200255730486749f01ada3af50c68ff615ed818e3917eb50354ef41f80f00021a6b52", @ANYRES16=0x0, @ANYBLOB="000226bd7000fbdbdf25040000000900010073797a32000000000900030073797a30000000000500040002000000"], 0x34}}, 0x4000) r1 = syz_open_dev$audion(&(0x7f0000000b80), 0x2, 0x40040) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000c00)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000c80)={0x16, 0x98, 0xfa00, {&(0x7f0000000bc0), 0x1, r2, 0x1c, 0x0, @ib={0x1b, 0xa7c, 0x10000, {"46dc025d8591a414bf1c11ec4baaf3dc"}, 0x8a, 0x0, 0x1ff}}}, 0xa0) sendmsg$tipc(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000400)="7681403c141b4ffb3f3915aac1b13e536702b82775c554f625284c4c1cd44238881bea9a5a74e22b3094288fbda75212e17de3101e2b29bc40143fbbab622e7cb565c499af", 0x45}, {&(0x7f0000000480)="79e197bcd6ecc0bd14e3ff7b9e6fb7d496183c14d11ea93fef78e9e31ca3943f4067fb6351dfe77d4ad1eefd0a61649c5f4d73013617785e9686f7a2d0103e5be4dd2b67c6318c98897a", 0x4a}, {&(0x7f0000000500)="9ec3a108a783f0745b43c5b05cc5084fb866f173d19844b1d4cc6421098a39fd8ce4428e3df7ad3fb23c858e3e31ce3ad9dacbc5eae8bfe15a6b3ede0a3ff8a4bab9c53729159e8916e15d81c116893bfc47bdb26a203b50569b5c4ef9148bc5ec67c9dd28f81b04c12bef33fff938eaf00a0fb9db0022e3ae34c12986855a9a9576a29b46d0fcc7fe5a2f0ef9e1caadfbcc4587efdb842b95d93a8a92d34d290c1f6fc906b40c6646a4321373592ddf62fac72a1f97fbe62eb1a511fd5b", 0xbe}, {&(0x7f00000005c0)="7f41fd089d70cfdef11b3839752070b00cabbefe3933c671e56998491be5ce27bc373f65bf2babb829d898250bef097260c5fb38665693b5cd7cb285c8efb2f4803bf9d90ab66d62d1ecfd04b0e2322f8c868f62da3a4f35ace92c2c5e3c0a6a24b8df89ba3772c4806c4d616a4be2ffe0d7149e21a891942eeb38150a1da1f34bf1c860233a66be2aa61db774988a77ecb11b797819f586f703dfa7a67265130e0964f0cb3c08c5f0e70e25c99dec82d2ed122595cdbb132d53aafa213156b421e32a8197098b537053236ab306abd0290573fb1b2cc14ffc08bf96e315a21618a211ee4072dc83d62f37c4ae10070d", 0xf0}, {&(0x7f00000006c0)="41df9826b882461113ed7aa45588c0b5e07019164f732827523a6f9d85ebbf7b13b25f220e31581df061eae5c4a631d40b4a550709a96d8482e4755ab153edcc68f57dd3fecb0a567c352a1b332ea1da3af311b8c13282e1761f7839a03ff91c9195e0a32d20e6cffc804e51ea03239fcb76ab58f8759b6116107adf9fa96420daed0b175a41ca3d3c5e74ad469b402488a058c009f2c4722fb7db2de04f30cef3c8ea6cf357b320a21d32374e19f5599f69ec74384ba760a5aff52acb0581dbfc357c11d52912f0985fc62ad0c5612b09d3d480f799bb92dbc95b0b3180e6ce12417863f7914e5d6262", 0xea}, {&(0x7f00000007c0)="96602e889aa543a3ad7ecad6201f11e9d3cb0d322991c977df25284b4f74fd6ed6e618e25de35952a8b6460a4cd86aae65429bb60254c74a109daeacacd404132787054b0f7a5d7c3d4051ffba0ee5b2092e20af8f76eae044340058d00d8179201cf380", 0x64}, {&(0x7f0000000840)="7730df7eb0a9148c16fa58c17136da3f6a6744803cf85568b8e13c02ba0265be94485820441df0ff5e96c121d8ff3d1d3e620de47dfbdea29cd7e8cadf0598c44133daf0492b68e60d0c96788bde330e8d85a54a3b1e6acfad1b4809d9aa354c3edf54b8d1845062c3d5a85733d9b922202178d4bee1ba5f4f84e40b9534a840914177735be442c50aa7daff4cb26469aee3d1d09cf96b4f57224847f14da8378d9dae06d2faedd0ad15b2daa6a1902b3ba68c257048863220f337bcd86f3256ba5fee4a", 0xc4}, {&(0x7f0000000940)="f6cf5ce80cadaf18f786a552b1673ca28c8c928fc432bf8ea7389d330762b358a52e189b832077d1c95a85fdd635145d25fe541b1c61226cfac110", 0x3b}, {&(0x7f0000000980)="69d71a8a690a5ed2199b1446bd41f26b2a4e6a15d6b039318b4c29b3938f96bbac96da54775c4fb51a2473f0ed6649812f02b4a6906acc6c2e0647c7ace790c8f2558ff589a351c05dd897904b89562573479b15afe6d16b9d97f54010671b69b4580b0fa738da9eb94e626d24af513820d53a66e77474cedf32b198bb838ee439c15909b3a5bff8a04c03825c7fb3d2d09188614acc629fa5726d5b7356008878274c9e87f13c0fdbba9b8f41be", 0xae}], 0x9, &(0x7f0000000b00)="3ce9a26f51449316c877e30632d466735138a2ce34f155800780cc4f86aab8120cbc3187f1df8130109042372e7bc348d3", 0x31, 0x4000094}, 0x20040840) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x75deb4bddcd9987e, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x20000005) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 1460.063570] ================================================================== [ 1460.071180] BUG: KASAN: use-after-free in __list_add_valid+0x93/0xa0 [ 1460.077684] Read of size 8 at addr ffff8880a483ab18 by task syz-executor.0/22262 [ 1460.085206] [ 1460.086835] CPU: 1 PID: 22262 Comm: syz-executor.0 Not tainted 4.14.307-syzkaller #0 [ 1460.094720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1460.104339] Call Trace: [ 1460.106974] dump_stack+0x1b2/0x281 [ 1460.110609] print_address_description.cold+0x54/0x1d3 [ 1460.115886] kasan_report_error.cold+0x8a/0x191 [ 1460.120544] ? __list_add_valid+0x93/0xa0 [ 1460.124760] __asan_report_load8_noabort+0x68/0x70 [ 1460.129672] ? __list_add_valid+0x93/0xa0 [ 1460.133984] __list_add_valid+0x93/0xa0 [ 1460.137945] rdma_listen+0x656/0x9b0 [ 1460.141640] ucma_listen+0x10b/0x170 [ 1460.145361] ? ucma_bind_ip+0x150/0x150 [ 1460.149326] ? _copy_from_user+0xb3/0x100 [ 1460.153460] ? ucma_bind_ip+0x150/0x150 [ 1460.157415] ucma_write+0x206/0x2c0 [ 1460.161028] ? ucma_set_ib_path+0x510/0x510 [ 1460.165343] __vfs_write+0xe4/0x630 [ 1460.168959] ? ucma_set_ib_path+0x510/0x510 [ 1460.173279] ? lock_acquire+0x170/0x3f0 [ 1460.177240] ? kernel_read+0x110/0x110 [ 1460.181119] ? common_file_perm+0x3ee/0x580 [ 1460.185443] ? security_file_permission+0x82/0x1e0 [ 1460.190362] ? rw_verify_area+0xe1/0x2a0 [ 1460.194412] vfs_write+0x17f/0x4d0 [ 1460.197946] SyS_write+0xf2/0x210 [ 1460.201560] ? SyS_read+0x210/0x210 [ 1460.205172] ? fput_many+0xe/0x140 [ 1460.208708] ? do_syscall_64+0x4c/0x640 [ 1460.212887] ? SyS_read+0x210/0x210 [ 1460.216501] do_syscall_64+0x1d5/0x640 [ 1460.220383] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1460.225564] RIP: 0033:0x7fbc792b40f9 [ 1460.229509] RSP: 002b:00007fbc77826168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1460.237212] RAX: ffffffffffffffda RBX: 00007fbc793d3f80 RCX: 00007fbc792b40f9 [ 1460.244473] RDX: 0000000000000010 RSI: 0000000020000280 RDI: 0000000000000004 [ 1460.251748] RBP: 00007fbc7930fae9 R08: 0000000000000000 R09: 0000000000000000 [ 1460.259013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1460.266272] R13: 00007ffe65d328af R14: 00007fbc77826300 R15: 0000000000022000 [ 1460.273548] [ 1460.275244] Allocated by task 20949: [ 1460.278964] kasan_kmalloc+0xeb/0x160 [ 1460.282743] kmem_cache_alloc_trace+0x131/0x3d0 [ 1460.287394] rdma_create_id+0x57/0x4c0 [ 1460.291287] ucma_create_id+0x18b/0x500 [ 1460.295255] ucma_write+0x206/0x2c0 [ 1460.298869] __vfs_write+0xe4/0x630 [ 1460.302483] vfs_write+0x17f/0x4d0 [ 1460.306005] SyS_write+0xf2/0x210 [ 1460.309445] do_syscall_64+0x1d5/0x640 [ 1460.313322] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1460.318491] [ 1460.320093] Freed by task 20946: [ 1460.323452] kasan_slab_free+0xc3/0x1a0 [ 1460.327402] kfree+0xc9/0x250 [ 1460.330489] ucma_close+0x11a/0x340 [ 1460.334091] __fput+0x25f/0x7a0 [ 1460.337364] task_work_run+0x11f/0x190 [ 1460.341236] exit_to_usermode_loop+0x1ad/0x200 [ 1460.345821] do_syscall_64+0x4a3/0x640 [ 1460.349708] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1460.354873] [ 1460.356485] The buggy address belongs to the object at ffff8880a483a940 [ 1460.356485] which belongs to the cache kmalloc-1024 of size 1024 [ 1460.369391] The buggy address is located 472 bytes inside of [ 1460.369391] 1024-byte region [ffff8880a483a940, ffff8880a483ad40) [ 1460.381327] The buggy address belongs to the page: [ 1460.386244] page:ffffea0002920e80 count:1 mapcount:0 mapping:ffff8880a483a040 index:0x0 compound_mapcount: 0 [ 1460.396208] flags: 0xfff00000008100(slab|head) [ 1460.400793] raw: 00fff00000008100 ffff8880a483a040 0000000000000000 0000000100000007 [ 1460.409886] raw: ffffea00023654a0 ffffea0002846ba0 ffff88813fe74ac0 0000000000000000 [ 1460.417765] page dumped because: kasan: bad access detected [ 1460.423451] [ 1460.425063] Memory state around the buggy address: [ 1460.429978] ffff8880a483aa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1460.437328] ffff8880a483aa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1460.444696] >ffff8880a483ab00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1460.452058] ^ [ 1460.456194] ffff8880a483ab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1460.463538] ffff8880a483ac00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1460.470886] ================================================================== [ 1460.478221] Disabling lock debugging due to kernel taint [ 1460.489734] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1460.489734] [ 1460.497724] CPU: 1 PID: 22262 Comm: syz-executor.0 Tainted: G B 4.14.307-syzkaller #0 [ 1460.506812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1460.516168] Call Trace: [ 1460.518756] dump_stack+0x1b2/0x281 [ 1460.522395] panic+0x21d/0x451 [ 1460.525583] ? add_taint.cold+0x16/0x16 [ 1460.529555] ? ___preempt_schedule+0x16/0x18 [ 1460.533961] ? preempt_schedule_common+0x45/0xc0 [ 1460.538717] ? ___preempt_schedule+0x16/0x18 [ 1460.543123] check_panic_on_warn.cold+0x19/0x35 [ 1460.547821] kasan_end_report+0x3a/0x40 [ 1460.551791] kasan_report_error.cold+0xa7/0x191 [ 1460.556460] ? __list_add_valid+0x93/0xa0 [ 1460.560600] __asan_report_load8_noabort+0x68/0x70 16:01:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) (async, rerun: 64) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x841}, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) 16:01:58 executing program 4: r0 = socket(0x2, 0xa, 0x0) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x20}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf5}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xf}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x7ff}, @jmp={0x5, 0x0, 0x7, 0x6, 0x9, 0xca9386ddecd0e1be, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit]}, &(0x7f0000000240)='syzkaller\x00', 0x2, 0xf9, &(0x7f0000000280)=""/249, 0xafd72af2e7387341, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x4, 0x6, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80) (async, rerun: 64) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async, rerun: 32) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001e40), 0x2, 0x0) (async, rerun: 32) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f0000000000)) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="09185375fc01ebbc44392f24f829752eb2020005000000"], &(0x7f0000000040)='GPL\x00', 0x6, 0x1f, &(0x7f0000000100)=""/31, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x7, 0x5, 0x1ac80000}, 0x10, 0x468d, r1, 0x0, &(0x7f00000004c0)=[0x1, 0x1]}, 0x80) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:01:58 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = syz_open_dev$audion(&(0x7f0000000000), 0xffffffffffff43c9, 0x90040) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 16:01:58 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0xffffffffffff43c9, 0x90040) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_open_dev$audion(&(0x7f0000000000), 0xffffffffffff43c9, 0x90040) (async) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) [ 1460.565615] ? __list_add_valid+0x93/0xa0 [ 1460.569763] __list_add_valid+0x93/0xa0 [ 1460.573741] rdma_listen+0x656/0x9b0 [ 1460.577478] ucma_listen+0x10b/0x170 [ 1460.581191] ? ucma_bind_ip+0x150/0x150 [ 1460.585249] ? _copy_from_user+0xb3/0x100 [ 1460.589391] ? ucma_bind_ip+0x150/0x150 [ 1460.593370] ucma_write+0x206/0x2c0 [ 1460.597117] ? ucma_set_ib_path+0x510/0x510 [ 1460.601775] __vfs_write+0xe4/0x630 [ 1460.605407] ? ucma_set_ib_path+0x510/0x510 [ 1460.609732] ? lock_acquire+0x170/0x3f0 [ 1460.613697] ? kernel_read+0x110/0x110 [ 1460.617579] ? common_file_perm+0x3ee/0x580 [ 1460.622042] ? security_file_permission+0x82/0x1e0 [ 1460.627003] ? rw_verify_area+0xe1/0x2a0 [ 1460.631063] vfs_write+0x17f/0x4d0 [ 1460.634617] SyS_write+0xf2/0x210 [ 1460.638085] ? SyS_read+0x210/0x210 [ 1460.641716] ? fput_many+0xe/0x140 [ 1460.645253] ? do_syscall_64+0x4c/0x640 [ 1460.649207] ? SyS_read+0x210/0x210 [ 1460.652814] do_syscall_64+0x1d5/0x640 [ 1460.656703] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1460.661910] RIP: 0033:0x7fbc792b40f9 [ 1460.665607] RSP: 002b:00007fbc77826168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1460.673324] RAX: ffffffffffffffda RBX: 00007fbc793d3f80 RCX: 00007fbc792b40f9 [ 1460.680598] RDX: 0000000000000010 RSI: 0000000020000280 RDI: 0000000000000004 [ 1460.687851] RBP: 00007fbc7930fae9 R08: 0000000000000000 R09: 0000000000000000 [ 1460.695106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1460.702663] R13: 00007ffe65d328af R14: 00007fbc77826300 R15: 0000000000022000 [ 1460.710101] Kernel Offset: disabled [ 1460.713791] Rebooting in 86400 seconds..