x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:00 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:00 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:00 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:00 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:00 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:00 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r6, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:00 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:00 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:00 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r6, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:01 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:01 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:01 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:03 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:03 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:03 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:03 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:03 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r6, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:05 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:05 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:06 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:06 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:07 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:07 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, 0x0, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:08 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, 0x0, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:08 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:08 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r6, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:09 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:09 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:10 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, 0x0, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:10 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, 0x0, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:11 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:12 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, 0x0, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:12 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, 0x0, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:12 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:12 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:13 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:13 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r6, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:13 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:13 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:15 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:16 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:17 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:18 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r6, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:36:18 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:18 executing program 2 (fault-call:2 fault-nth:0): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) [ 239.992037][T13959] FAULT_INJECTION: forcing a failure. [ 239.992037][T13959] name fail_usercopy, interval 1, probability 0, space 0, times 1 07:36:18 executing program 4 (fault-call:2 fault-nth:0): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) [ 240.054800][T13959] CPU: 0 PID: 13959 Comm: syz-executor.2 Not tainted 5.11.0-rc5-syzkaller #0 [ 240.063597][T13959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.073645][T13959] Call Trace: [ 240.076925][T13959] dump_stack+0x116/0x15d [ 240.081278][T13959] should_fail+0x23c/0x250 [ 240.085688][T13959] should_fail_usercopy+0x16/0x20 [ 240.090736][T13959] _copy_from_user+0x1c/0xd0 [ 240.095369][T13959] __copy_msghdr_from_user+0x44/0x350 [ 240.100734][T13959] ? __fget_light+0x219/0x260 [ 240.105399][T13959] __sys_sendmmsg+0x210/0x4b0 [ 240.110065][T13959] ? kstrtoull+0x30e/0x350 [ 240.114539][T13959] ? kstrtouint_from_user+0x104/0x130 [ 240.120030][T13959] ? __rcu_read_unlock+0x5c/0x250 [ 240.125060][T13959] ? fsnotify_perm+0x59/0x2e0 [ 240.129740][T13959] ? __fsnotify_parent+0x32f/0x430 [ 240.134849][T13959] ? get_pid_task+0x90/0xc0 [ 240.139384][T13959] ? vfs_write+0x569/0x7e0 [ 240.143884][T13959] ? __fget_light+0x219/0x260 [ 240.148554][T13959] ? fput+0x2d/0x130 [ 240.152442][T13959] ? ksys_write+0x157/0x180 [ 240.156963][T13959] __x64_sys_sendmmsg+0x53/0x60 [ 240.161927][T13959] do_syscall_64+0x39/0x80 [ 240.166394][T13959] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 240.172285][T13959] RIP: 0033:0x465b09 [ 240.176171][T13959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 240.195772][T13959] RSP: 002b:00007fb7db239188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 07:36:18 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r6, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:36:18 executing program 5 (fault-call:2 fault-nth:0): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) [ 240.204214][T13959] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 240.212181][T13959] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 [ 240.220132][T13959] RBP: 00007fb7db2391d0 R08: 0000000000000000 R09: 0000000000000000 [ 240.228084][T13959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.236094][T13959] R13: 00007ffcef0328ef R14: 00007fb7db239300 R15: 0000000000022000 07:36:19 executing program 2 (fault-call:2 fault-nth:1): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) [ 240.347854][T13973] FAULT_INJECTION: forcing a failure. [ 240.347854][T13973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.355606][T13975] FAULT_INJECTION: forcing a failure. [ 240.355606][T13975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.376476][T13974] FAULT_INJECTION: forcing a failure. [ 240.376476][T13974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.397844][T13975] CPU: 1 PID: 13975 Comm: syz-executor.2 Not tainted 5.11.0-rc5-syzkaller #0 [ 240.406660][T13975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.416741][T13975] Call Trace: [ 240.420013][T13975] dump_stack+0x116/0x15d [ 240.424338][T13975] should_fail+0x23c/0x250 [ 240.428862][T13975] should_fail_usercopy+0x16/0x20 [ 240.433881][T13975] _copy_from_user+0x1c/0xd0 [ 240.438487][T13975] __copy_msghdr_from_user+0x2a5/0x350 [ 240.443941][T13975] __sys_sendmmsg+0x210/0x4b0 [ 240.448679][T13975] ? kstrtoull+0x30f/0x350 [ 240.453103][T13975] ? kstrtouint_from_user+0x104/0x130 [ 240.458546][T13975] ? __rcu_read_unlock+0x5c/0x250 [ 240.463603][T13975] ? fsnotify_perm+0x59/0x2e0 [ 240.468326][T13975] ? __fsnotify_parent+0x32f/0x430 [ 240.473499][T13975] ? get_pid_task+0x90/0xc0 [ 240.478168][T13975] ? vfs_write+0x569/0x7e0 [ 240.482590][T13975] ? __fget_light+0x219/0x260 [ 240.487314][T13975] ? fput+0x2d/0x130 [ 240.491261][T13975] ? ksys_write+0x157/0x180 [ 240.495826][T13975] __x64_sys_sendmmsg+0x53/0x60 [ 240.500681][T13975] do_syscall_64+0x39/0x80 [ 240.505091][T13975] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 240.511115][T13975] RIP: 0033:0x465b09 [ 240.515003][T13975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 240.534703][T13975] RSP: 002b:00007fb7db239188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 240.543285][T13975] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 240.551384][T13975] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 [ 240.559342][T13975] RBP: 00007fb7db2391d0 R08: 0000000000000000 R09: 0000000000000000 [ 240.567315][T13975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.575281][T13975] R13: 00007ffcef0328ef R14: 00007fb7db239300 R15: 0000000000022000 [ 240.587675][T13973] CPU: 0 PID: 13973 Comm: syz-executor.4 Not tainted 5.11.0-rc5-syzkaller #0 [ 240.596466][T13973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.606523][T13973] Call Trace: [ 240.609800][T13973] dump_stack+0x116/0x15d [ 240.614245][T13973] should_fail+0x23c/0x250 [ 240.618656][T13973] should_fail_usercopy+0x16/0x20 [ 240.623676][T13973] _copy_from_user+0x1c/0xd0 [ 240.628292][T13973] __copy_msghdr_from_user+0x44/0x350 [ 240.633712][T13973] ? __fget_light+0x219/0x260 [ 240.638414][T13973] __sys_sendmmsg+0x210/0x4b0 [ 240.643161][T13973] ? kstrtoull+0x30e/0x350 [ 240.647704][T13973] ? kstrtouint_from_user+0x104/0x130 [ 240.653163][T13973] ? __rcu_read_unlock+0x5c/0x250 [ 240.658302][T13973] ? fsnotify_perm+0x59/0x2e0 [ 240.662985][T13973] ? __fsnotify_parent+0x32f/0x430 [ 240.668209][T13973] ? get_pid_task+0x90/0xc0 [ 240.672710][T13973] ? vfs_write+0x569/0x7e0 [ 240.677131][T13973] ? __fget_light+0x219/0x260 [ 240.681896][T13973] ? fput+0x2d/0x130 [ 240.685796][T13973] ? ksys_write+0x157/0x180 [ 240.690319][T13973] __x64_sys_sendmmsg+0x53/0x60 [ 240.695277][T13973] do_syscall_64+0x39/0x80 [ 240.699741][T13973] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 240.705623][T13973] RIP: 0033:0x465b09 [ 240.709550][T13973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 240.729362][T13973] RSP: 002b:00007efdaae5e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 240.737763][T13973] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 240.745822][T13973] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 [ 240.753851][T13973] RBP: 00007efdaae5e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 240.761817][T13973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.769774][T13973] R13: 00007ffdf0498d2f R14: 00007efdaae5e300 R15: 0000000000022000 [ 240.781510][T13974] CPU: 1 PID: 13974 Comm: syz-executor.5 Not tainted 5.11.0-rc5-syzkaller #0 [ 240.790490][T13974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.800540][T13974] Call Trace: [ 240.803981][T13974] dump_stack+0x116/0x15d [ 240.808369][T13974] should_fail+0x23c/0x250 [ 240.812776][T13974] should_fail_usercopy+0x16/0x20 [ 240.817792][T13974] _copy_from_user+0x1c/0xd0 [ 240.822483][T13974] __copy_msghdr_from_user+0x44/0x350 [ 240.827894][T13974] ? __fget_light+0x219/0x260 [ 240.832574][T13974] __sys_sendmmsg+0x210/0x4b0 [ 240.837253][T13974] ? kstrtoull+0x30e/0x350 [ 240.841669][T13974] ? kstrtouint_from_user+0x104/0x130 [ 240.847041][T13974] ? __rcu_read_unlock+0x5c/0x250 [ 240.853147][T13974] ? fsnotify_perm+0x59/0x2e0 [ 240.857813][T13974] ? __fsnotify_parent+0x32f/0x430 [ 240.862910][T13974] ? get_pid_task+0x90/0xc0 [ 240.867477][T13974] ? vfs_write+0x569/0x7e0 [ 240.871939][T13974] ? __fget_light+0x219/0x260 [ 240.876709][T13974] ? fput+0x2d/0x130 [ 240.880596][T13974] ? ksys_write+0x157/0x180 [ 240.885124][T13974] __x64_sys_sendmmsg+0x53/0x60 [ 240.889977][T13974] do_syscall_64+0x39/0x80 [ 240.894390][T13974] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 240.900277][T13974] RIP: 0033:0x465b09 [ 240.904204][T13974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 240.923797][T13974] RSP: 002b:00007fa2158b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 240.932197][T13974] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 240.940157][T13974] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 07:36:19 executing program 4 (fault-call:2 fault-nth:1): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:19 executing program 2 (fault-call:2 fault-nth:2): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) [ 240.948134][T13974] RBP: 00007fa2158b61d0 R08: 0000000000000000 R09: 0000000000000000 [ 240.956100][T13974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.964060][T13974] R13: 00007ffd528301cf R14: 00007fa2158b6300 R15: 0000000000022000 07:36:19 executing program 5 (fault-call:2 fault-nth:1): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:19 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) [ 241.063015][T13982] FAULT_INJECTION: forcing a failure. [ 241.063015][T13982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.095003][T13985] FAULT_INJECTION: forcing a failure. [ 241.095003][T13985] name failslab, interval 1, probability 0, space 0, times 1 [ 241.107125][T13986] FAULT_INJECTION: forcing a failure. [ 241.107125][T13986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.110945][T13982] CPU: 0 PID: 13982 Comm: syz-executor.4 Not tainted 5.11.0-rc5-syzkaller #0 [ 241.129408][T13982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.139577][T13982] Call Trace: [ 241.142880][T13982] dump_stack+0x116/0x15d [ 241.147206][T13982] should_fail+0x23c/0x250 [ 241.151637][T13982] should_fail_usercopy+0x16/0x20 [ 241.156672][T13982] _copy_from_user+0x1c/0xd0 [ 241.161278][T13982] __copy_msghdr_from_user+0x2a5/0x350 [ 241.166834][T13982] __sys_sendmmsg+0x210/0x4b0 [ 241.171502][T13982] ? kstrtoull+0x30f/0x350 [ 241.175907][T13982] ? kstrtouint_from_user+0x104/0x130 [ 241.181337][T13982] ? __rcu_read_unlock+0x5c/0x250 [ 241.186426][T13982] ? fsnotify_perm+0x59/0x2e0 [ 241.191120][T13982] ? __fsnotify_parent+0x32f/0x430 [ 241.196273][T13982] ? get_pid_task+0x90/0xc0 [ 241.200777][T13982] ? vfs_write+0x569/0x7e0 [ 241.205246][T13982] ? __fget_light+0x219/0x260 [ 241.209943][T13982] ? fput+0x2d/0x130 [ 241.213839][T13982] ? ksys_write+0x157/0x180 [ 241.218334][T13982] __x64_sys_sendmmsg+0x53/0x60 [ 241.223179][T13982] do_syscall_64+0x39/0x80 [ 241.227668][T13982] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 241.233546][T13982] RIP: 0033:0x465b09 [ 241.237443][T13982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 241.257133][T13982] RSP: 002b:00007efdaae5e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 241.265538][T13982] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 241.273521][T13982] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 [ 241.281485][T13982] RBP: 00007efdaae5e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 241.289527][T13982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.297487][T13982] R13: 00007ffdf0498d2f R14: 00007efdaae5e300 R15: 0000000000022000 [ 241.305448][T13986] CPU: 1 PID: 13986 Comm: syz-executor.5 Not tainted 5.11.0-rc5-syzkaller #0 [ 241.314215][T13986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.324383][T13986] Call Trace: [ 241.327651][T13986] dump_stack+0x116/0x15d [ 241.332059][T13986] should_fail+0x23c/0x250 [ 241.336463][T13986] should_fail_usercopy+0x16/0x20 [ 241.341489][T13986] _copy_from_user+0x1c/0xd0 [ 241.346077][T13986] __copy_msghdr_from_user+0x2a5/0x350 [ 241.351536][T13986] __sys_sendmmsg+0x210/0x4b0 [ 241.356243][T13986] ? kstrtoull+0x30f/0x350 [ 241.360720][T13986] ? kstrtouint_from_user+0x104/0x130 [ 241.366089][T13986] ? __rcu_read_unlock+0x5c/0x250 [ 241.371112][T13986] ? fsnotify_perm+0x59/0x2e0 [ 241.375797][T13986] ? __fsnotify_parent+0x32f/0x430 [ 241.380896][T13986] ? get_pid_task+0x90/0xc0 [ 241.385400][T13986] ? vfs_write+0x569/0x7e0 [ 241.389814][T13986] ? __fget_light+0x219/0x260 [ 241.394514][T13986] ? fput+0x2d/0x130 [ 241.398436][T13986] ? ksys_write+0x157/0x180 [ 241.402932][T13986] __x64_sys_sendmmsg+0x53/0x60 [ 241.407821][T13986] do_syscall_64+0x39/0x80 [ 241.412249][T13986] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 241.418152][T13986] RIP: 0033:0x465b09 [ 241.422031][T13986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 241.441670][T13986] RSP: 002b:00007fa2158b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 241.450073][T13986] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 241.458030][T13986] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 [ 241.466052][T13986] RBP: 00007fa2158b61d0 R08: 0000000000000000 R09: 0000000000000000 [ 241.474110][T13986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.482094][T13986] R13: 00007ffd528301cf R14: 00007fa2158b6300 R15: 0000000000022000 [ 241.490064][T13985] CPU: 0 PID: 13985 Comm: syz-executor.2 Not tainted 5.11.0-rc5-syzkaller #0 [ 241.498867][T13985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.508920][T13985] Call Trace: [ 241.512237][T13985] dump_stack+0x116/0x15d [ 241.517292][T13985] should_fail+0x23c/0x250 [ 241.521708][T13985] __should_failslab+0x81/0x90 [ 241.526471][T13985] should_failslab+0x5/0x20 [ 241.530975][T13985] kmem_cache_alloc_node+0x46/0x2e0 [ 241.536190][T13985] ? __alloc_skb+0x98/0x300 [ 241.540808][T13985] __alloc_skb+0x98/0x300 [ 241.545142][T13985] __ip6_append_data+0x17b6/0x2120 [ 241.550305][T13985] ? ip6_setup_cork+0x826/0x8b0 [ 241.555168][T13985] ip6_append_data+0x17e/0x230 [ 241.559955][T13985] ? rawv6_send_hdrinc+0x9a0/0x9a0 [ 241.565059][T13985] ? rawv6_send_hdrinc+0x9a0/0x9a0 [ 241.570163][T13985] rawv6_sendmsg+0xe2f/0x1330 [ 241.574933][T13985] ? rmqueue+0xfd4/0x1180 [ 241.579323][T13985] inet_sendmsg+0x5f/0x80 [ 241.583669][T13985] ? inet_send_prepare+0x210/0x210 [ 241.588774][T13985] ____sys_sendmsg+0x360/0x4d0 [ 241.593580][T13985] ? import_iovec+0xb8/0xd0 [ 241.598074][T13985] __sys_sendmmsg+0x335/0x4b0 [ 241.602742][T13985] ? kstrtoull+0x30f/0x350 [ 241.607216][T13985] ? kstrtouint_from_user+0x104/0x130 [ 241.612619][T13985] ? __rcu_read_unlock+0x5c/0x250 [ 241.617643][T13985] ? fsnotify_perm+0x59/0x2e0 [ 241.622318][T13985] ? __fsnotify_parent+0x32f/0x430 [ 241.627426][T13985] ? get_pid_task+0x90/0xc0 [ 241.631936][T13985] ? vfs_write+0x569/0x7e0 [ 241.636397][T13985] __x64_sys_sendmmsg+0x53/0x60 [ 241.641264][T13985] do_syscall_64+0x39/0x80 [ 241.645674][T13985] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 241.651568][T13985] RIP: 0033:0x465b09 [ 241.655531][T13985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 241.675164][T13985] RSP: 002b:00007fb7db239188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 241.683581][T13985] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 241.691548][T13985] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 [ 241.699513][T13985] RBP: 00007fb7db2391d0 R08: 0000000000000000 R09: 0000000000000000 [ 241.707478][T13985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.715515][T13985] R13: 00007ffcef0328ef R14: 00007fb7db239300 R15: 0000000000022000 07:36:20 executing program 4 (fault-call:2 fault-nth:2): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:20 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:20 executing program 5 (fault-call:2 fault-nth:2): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) [ 241.856680][T13998] FAULT_INJECTION: forcing a failure. [ 241.856680][T13998] name failslab, interval 1, probability 0, space 0, times 0 [ 241.896793][T13998] CPU: 0 PID: 13998 Comm: syz-executor.4 Not tainted 5.11.0-rc5-syzkaller #0 [ 241.905708][T13998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.915755][T13998] Call Trace: [ 241.919028][T13998] dump_stack+0x116/0x15d [ 241.923372][T13998] should_fail+0x23c/0x250 [ 241.927779][T13998] __should_failslab+0x81/0x90 [ 241.932619][T13998] should_failslab+0x5/0x20 [ 241.937115][T13998] kmem_cache_alloc_node+0x46/0x2e0 [ 241.942336][T13998] ? __alloc_skb+0x98/0x300 [ 241.946836][T13998] __alloc_skb+0x98/0x300 [ 241.951189][T13998] __ip6_append_data+0x17b6/0x2120 [ 241.956305][T13998] ? ip6_setup_cork+0x826/0x8b0 [ 241.961226][T13998] ip6_append_data+0x17e/0x230 [ 241.965995][T13998] ? rawv6_send_hdrinc+0x9a0/0x9a0 [ 241.971152][T13998] ? rawv6_send_hdrinc+0x9a0/0x9a0 [ 241.976343][T13998] rawv6_sendmsg+0xe2f/0x1330 [ 241.981026][T13998] ? rmqueue+0xfd4/0x1180 [ 241.985378][T13998] inet_sendmsg+0x5f/0x80 [ 241.989795][T13998] ? inet_send_prepare+0x210/0x210 [ 241.994989][T13998] ____sys_sendmsg+0x360/0x4d0 [ 241.999758][T13998] ? import_iovec+0xb8/0xd0 [ 242.004263][T13998] __sys_sendmmsg+0x335/0x4b0 [ 242.008948][T13998] ? kstrtoull+0x30f/0x350 [ 242.013395][T13998] ? kstrtouint_from_user+0x104/0x130 [ 242.018767][T13998] ? __rcu_read_unlock+0x5c/0x250 [ 242.023813][T13998] ? fsnotify_perm+0x59/0x2e0 [ 242.028539][T13998] ? __fsnotify_parent+0x32f/0x430 [ 242.033645][T13998] ? get_pid_task+0x90/0xc0 [ 242.038145][T13998] ? vfs_write+0x569/0x7e0 [ 242.042592][T13998] __x64_sys_sendmmsg+0x53/0x60 [ 242.047510][T13998] do_syscall_64+0x39/0x80 [ 242.051923][T13998] entry_SYSCALL_64_after_hwframe+0x44/0xa9 07:36:20 executing program 2 (fault-call:2 fault-nth:3): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) [ 242.057810][T13998] RIP: 0033:0x465b09 [ 242.061699][T13998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 242.081302][T13998] RSP: 002b:00007efdaae5e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 242.089710][T13998] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 242.097679][T13998] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 [ 242.105638][T13998] RBP: 00007efdaae5e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 242.113605][T13998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.121573][T13998] R13: 00007ffdf0498d2f R14: 00007efdaae5e300 R15: 0000000000022000 [ 242.158527][T14006] FAULT_INJECTION: forcing a failure. [ 242.158527][T14006] name failslab, interval 1, probability 0, space 0, times 0 [ 242.183008][T14007] FAULT_INJECTION: forcing a failure. [ 242.183008][T14007] name failslab, interval 1, probability 0, space 0, times 0 [ 242.214491][T14006] CPU: 1 PID: 14006 Comm: syz-executor.5 Not tainted 5.11.0-rc5-syzkaller #0 [ 242.223309][T14006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.233357][T14006] Call Trace: [ 242.236628][T14006] dump_stack+0x116/0x15d [ 242.240958][T14006] should_fail+0x23c/0x250 [ 242.245376][T14006] __should_failslab+0x81/0x90 [ 242.250207][T14006] should_failslab+0x5/0x20 [ 242.254701][T14006] kmem_cache_alloc_node+0x46/0x2e0 [ 242.259959][T14006] ? __alloc_skb+0x98/0x300 [ 242.264457][T14006] __alloc_skb+0x98/0x300 [ 242.268785][T14006] __ip6_append_data+0x17b6/0x2120 [ 242.273903][T14006] ? ip6_setup_cork+0x826/0x8b0 [ 242.278755][T14006] ip6_append_data+0x17e/0x230 [ 242.283556][T14006] ? rawv6_send_hdrinc+0x9a0/0x9a0 [ 242.288699][T14006] ? rawv6_send_hdrinc+0x9a0/0x9a0 [ 242.293819][T14006] rawv6_sendmsg+0xe2f/0x1330 [ 242.298505][T14006] ? rmqueue+0xfd4/0x1180 [ 242.302842][T14006] inet_sendmsg+0x5f/0x80 [ 242.307174][T14006] ? inet_send_prepare+0x210/0x210 [ 242.312429][T14006] ____sys_sendmsg+0x360/0x4d0 [ 242.317280][T14006] ? import_iovec+0xb8/0xd0 [ 242.321786][T14006] __sys_sendmmsg+0x335/0x4b0 [ 242.326470][T14006] ? kstrtoull+0x30f/0x350 [ 242.330892][T14006] ? kstrtouint_from_user+0x104/0x130 [ 242.336340][T14006] ? __rcu_read_unlock+0x5c/0x250 [ 242.341360][T14006] ? fsnotify_perm+0x59/0x2e0 [ 242.346068][T14006] ? __fsnotify_parent+0x32f/0x430 [ 242.351172][T14006] ? get_pid_task+0x90/0xc0 [ 242.355744][T14006] ? vfs_write+0x569/0x7e0 [ 242.360168][T14006] __x64_sys_sendmmsg+0x53/0x60 [ 242.365026][T14006] do_syscall_64+0x39/0x80 [ 242.369460][T14006] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 242.375342][T14006] RIP: 0033:0x465b09 [ 242.379222][T14006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 242.398819][T14006] RSP: 002b:00007fa2158b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 242.407240][T14006] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 07:36:21 executing program 4 (fault-call:2 fault-nth:3): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) [ 242.415313][T14006] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 [ 242.423312][T14006] RBP: 00007fa2158b61d0 R08: 0000000000000000 R09: 0000000000000000 [ 242.431412][T14006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.439395][T14006] R13: 00007ffd528301cf R14: 00007fa2158b6300 R15: 0000000000022000 [ 242.448364][T14007] CPU: 0 PID: 14007 Comm: syz-executor.2 Not tainted 5.11.0-rc5-syzkaller #0 [ 242.457144][T14007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.467195][T14007] Call Trace: [ 242.470472][T14007] dump_stack+0x116/0x15d [ 242.474916][T14007] should_fail+0x23c/0x250 [ 242.479349][T14007] ? __ip6_append_data+0x17b6/0x2120 [ 242.484714][T14007] __should_failslab+0x81/0x90 [ 242.489479][T14007] should_failslab+0x5/0x20 [ 242.493973][T14007] kmem_cache_alloc_node_trace+0x4b/0x2e0 [ 242.499684][T14007] ? __kmalloc_node_track_caller+0x30/0x40 [ 242.505490][T14007] ? __ip6_append_data+0x17b6/0x2120 [ 242.510771][T14007] __kmalloc_node_track_caller+0x30/0x40 [ 242.516528][T14007] __alloc_skb+0xd2/0x300 [ 242.520864][T14007] __ip6_append_data+0x17b6/0x2120 [ 242.525986][T14007] ? ip6_setup_cork+0x826/0x8b0 [ 242.530849][T14007] ip6_append_data+0x17e/0x230 [ 242.535732][T14007] ? rawv6_send_hdrinc+0x9a0/0x9a0 [ 242.540915][T14007] ? rawv6_send_hdrinc+0x9a0/0x9a0 [ 242.546036][T14007] rawv6_sendmsg+0xe2f/0x1330 [ 242.550716][T14007] ? rmqueue+0xfd4/0x1180 [ 242.555036][T14007] inet_sendmsg+0x5f/0x80 [ 242.559367][T14007] ? inet_send_prepare+0x210/0x210 [ 242.564513][T14007] ____sys_sendmsg+0x360/0x4d0 [ 242.569270][T14007] ? import_iovec+0xb8/0xd0 [ 242.573773][T14007] __sys_sendmmsg+0x335/0x4b0 [ 242.578504][T14007] ? kstrtoull+0x30f/0x350 [ 242.582956][T14007] ? kstrtouint_from_user+0x104/0x130 [ 242.588331][T14007] ? __rcu_read_unlock+0x5c/0x250 [ 242.593421][T14007] ? fsnotify_perm+0x59/0x2e0 [ 242.598156][T14007] ? __fsnotify_parent+0x32f/0x430 [ 242.603260][T14007] ? get_pid_task+0x90/0xc0 [ 242.607809][T14007] ? vfs_write+0x569/0x7e0 [ 242.612229][T14007] __x64_sys_sendmmsg+0x53/0x60 [ 242.617113][T14007] do_syscall_64+0x39/0x80 [ 242.621543][T14007] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 242.627438][T14007] RIP: 0033:0x465b09 [ 242.631329][T14007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 242.651012][T14007] RSP: 002b:00007fb7db239188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 242.659480][T14007] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 242.667454][T14007] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 [ 242.675453][T14007] RBP: 00007fb7db2391d0 R08: 0000000000000000 R09: 0000000000000000 [ 242.683425][T14007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.691390][T14007] R13: 00007ffcef0328ef R14: 00007fb7db239300 R15: 0000000000022000 [ 242.729371][T14017] FAULT_INJECTION: forcing a failure. [ 242.729371][T14017] name failslab, interval 1, probability 0, space 0, times 0 [ 242.781039][T14017] CPU: 1 PID: 14017 Comm: syz-executor.4 Not tainted 5.11.0-rc5-syzkaller #0 [ 242.789837][T14017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.799891][T14017] Call Trace: [ 242.803167][T14017] dump_stack+0x116/0x15d [ 242.807546][T14017] should_fail+0x23c/0x250 [ 242.812086][T14017] ? __ip6_append_data+0x17b6/0x2120 [ 242.817372][T14017] __should_failslab+0x81/0x90 [ 242.822148][T14017] should_failslab+0x5/0x20 [ 242.826650][T14017] kmem_cache_alloc_node_trace+0x4b/0x2e0 [ 242.832380][T14017] ? __kmalloc_node_track_caller+0x30/0x40 [ 242.838174][T14017] ? __ip6_append_data+0x17b6/0x2120 [ 242.843504][T14017] __kmalloc_node_track_caller+0x30/0x40 [ 242.849200][T14017] __alloc_skb+0xd2/0x300 [ 242.853526][T14017] __ip6_append_data+0x17b6/0x2120 [ 242.858706][T14017] ? ip6_setup_cork+0x826/0x8b0 [ 242.863670][T14017] ip6_append_data+0x17e/0x230 [ 242.868424][T14017] ? rawv6_send_hdrinc+0x9a0/0x9a0 [ 242.873517][T14017] ? rawv6_send_hdrinc+0x9a0/0x9a0 [ 242.878689][T14017] rawv6_sendmsg+0xe2f/0x1330 [ 242.883362][T14017] ? rmqueue+0xfd4/0x1180 [ 242.887749][T14017] inet_sendmsg+0x5f/0x80 [ 242.892068][T14017] ? inet_send_prepare+0x210/0x210 [ 242.897308][T14017] ____sys_sendmsg+0x360/0x4d0 [ 242.902133][T14017] ? import_iovec+0xb8/0xd0 [ 242.906653][T14017] __sys_sendmmsg+0x335/0x4b0 [ 242.911371][T14017] ? kstrtoull+0x30f/0x350 [ 242.915786][T14017] ? kstrtouint_from_user+0x104/0x130 [ 242.921147][T14017] ? __rcu_read_unlock+0x5c/0x250 [ 242.926173][T14017] ? fsnotify_perm+0x59/0x2e0 [ 242.930844][T14017] ? __fsnotify_parent+0x32f/0x430 [ 242.935953][T14017] ? get_pid_task+0x90/0xc0 [ 242.940529][T14017] ? vfs_write+0x569/0x7e0 [ 242.944955][T14017] __x64_sys_sendmmsg+0x53/0x60 [ 242.949831][T14017] do_syscall_64+0x39/0x80 [ 242.954309][T14017] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 242.960227][T14017] RIP: 0033:0x465b09 [ 242.964110][T14017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 242.983892][T14017] RSP: 002b:00007efdaae5e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 242.992352][T14017] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 243.000320][T14017] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 [ 243.008282][T14017] RBP: 00007efdaae5e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 243.016237][T14017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.024201][T14017] R13: 00007ffdf0498d2f R14: 00007efdaae5e300 R15: 0000000000022000 07:36:22 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r6, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:36:22 executing program 2 (fault-call:2 fault-nth:4): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:22 executing program 5 (fault-call:2 fault-nth:3): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:22 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:22 executing program 4 (fault-call:2 fault-nth:4): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:22 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) [ 243.367661][T14032] FAULT_INJECTION: forcing a failure. [ 243.367661][T14032] name failslab, interval 1, probability 0, space 0, times 0 [ 243.384797][T14033] FAULT_INJECTION: forcing a failure. [ 243.384797][T14033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.400180][T14038] FAULT_INJECTION: forcing a failure. [ 243.400180][T14038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.415319][T14032] CPU: 1 PID: 14032 Comm: syz-executor.5 Not tainted 5.11.0-rc5-syzkaller #0 [ 243.424137][T14032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.434187][T14032] Call Trace: [ 243.437461][T14032] dump_stack+0x116/0x15d [ 243.441835][T14032] should_fail+0x23c/0x250 [ 243.446371][T14032] ? __ip6_append_data+0x17b6/0x2120 [ 243.451677][T14032] __should_failslab+0x81/0x90 [ 243.456438][T14032] should_failslab+0x5/0x20 [ 243.460933][T14032] kmem_cache_alloc_node_trace+0x4b/0x2e0 [ 243.466651][T14032] ? __kmalloc_node_track_caller+0x30/0x40 [ 243.472568][T14032] ? __ip6_append_data+0x17b6/0x2120 [ 243.477857][T14032] __kmalloc_node_track_caller+0x30/0x40 [ 243.483479][T14032] __alloc_skb+0xd2/0x300 [ 243.487807][T14032] __ip6_append_data+0x17b6/0x2120 [ 243.492981][T14032] ? ip6_setup_cork+0x826/0x8b0 [ 243.497838][T14032] ip6_append_data+0x17e/0x230 [ 243.502594][T14032] ? rawv6_send_hdrinc+0x9a0/0x9a0 [ 243.507699][T14032] ? rawv6_send_hdrinc+0x9a0/0x9a0 [ 243.512864][T14032] rawv6_sendmsg+0xe2f/0x1330 [ 243.517589][T14032] ? rmqueue+0xfd4/0x1180 [ 243.521916][T14032] inet_sendmsg+0x5f/0x80 [ 243.526292][T14032] ? inet_send_prepare+0x210/0x210 [ 243.531426][T14032] ____sys_sendmsg+0x360/0x4d0 [ 243.536223][T14032] ? import_iovec+0xb8/0xd0 [ 243.540745][T14032] __sys_sendmmsg+0x335/0x4b0 [ 243.545429][T14032] ? kstrtoull+0x30f/0x350 [ 243.549913][T14032] ? kstrtouint_from_user+0x104/0x130 [ 243.555419][T14032] ? __rcu_read_unlock+0x5c/0x250 [ 243.560435][T14032] ? fsnotify_perm+0x59/0x2e0 [ 243.565162][T14032] ? __fsnotify_parent+0x32f/0x430 [ 243.570318][T14032] ? get_pid_task+0x90/0xc0 [ 243.574853][T14032] ? vfs_write+0x569/0x7e0 [ 243.579324][T14032] __x64_sys_sendmmsg+0x53/0x60 [ 243.584178][T14032] do_syscall_64+0x39/0x80 [ 243.588603][T14032] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 243.594573][T14032] RIP: 0033:0x465b09 [ 243.598452][T14032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 243.618079][T14032] RSP: 002b:00007fa2158b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 243.626536][T14032] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 243.634493][T14032] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 [ 243.642449][T14032] RBP: 00007fa2158b61d0 R08: 0000000000000000 R09: 0000000000000000 [ 243.650474][T14032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.658443][T14032] R13: 00007ffd528301cf R14: 00007fa2158b6300 R15: 0000000000022000 [ 243.675768][T14033] CPU: 0 PID: 14033 Comm: syz-executor.2 Not tainted 5.11.0-rc5-syzkaller #0 [ 243.684664][T14033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.694734][T14033] Call Trace: [ 243.698025][T14033] dump_stack+0x116/0x15d [ 243.702353][T14033] should_fail+0x23c/0x250 [ 243.706790][T14033] should_fail_usercopy+0x16/0x20 [ 243.711858][T14033] _copy_to_user+0x1c/0x90 [ 243.716263][T14033] simple_read_from_buffer+0xab/0x120 [ 243.721657][T14033] proc_fail_nth_read+0xf6/0x140 [ 243.726594][T14033] ? rw_verify_area+0x136/0x250 [ 243.731493][T14033] ? proc_fault_inject_write+0x200/0x200 [ 243.737173][T14033] vfs_read+0x154/0x5d0 [ 243.741420][T14033] ? __fget_light+0x219/0x260 [ 243.746083][T14033] ksys_read+0xce/0x180 [ 243.750217][T14033] __x64_sys_read+0x3e/0x50 [ 243.754705][T14033] do_syscall_64+0x39/0x80 [ 243.759155][T14033] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 243.765071][T14033] RIP: 0033:0x418d8c [ 243.768952][T14033] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 243.788543][T14033] RSP: 002b:00007fb7db239170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 243.797008][T14033] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000418d8c [ 243.805018][T14033] RDX: 000000000000000f RSI: 00007fb7db2391e0 RDI: 0000000000000004 [ 243.812973][T14033] RBP: 00007fb7db2391d0 R08: 0000000000000000 R09: 0000000000000000 [ 243.820947][T14033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.828900][T14033] R13: 00007ffcef0328ef R14: 00007fb7db239300 R15: 0000000000022000 [ 243.838904][T14038] CPU: 1 PID: 14038 Comm: syz-executor.4 Not tainted 5.11.0-rc5-syzkaller #0 [ 243.847736][T14038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.857782][T14038] Call Trace: [ 243.861047][T14038] dump_stack+0x116/0x15d [ 243.865366][T14038] should_fail+0x23c/0x250 [ 243.869809][T14038] should_fail_usercopy+0x16/0x20 [ 243.874826][T14038] _copy_to_user+0x1c/0x90 [ 243.879230][T14038] simple_read_from_buffer+0xab/0x120 [ 243.884604][T14038] proc_fail_nth_read+0xf6/0x140 [ 243.889640][T14038] ? rw_verify_area+0x136/0x250 [ 243.894596][T14038] ? proc_fault_inject_write+0x200/0x200 [ 243.900328][T14038] vfs_read+0x154/0x5d0 [ 243.904572][T14038] ? __fget_light+0x219/0x260 [ 243.909240][T14038] ksys_read+0xce/0x180 [ 243.913420][T14038] __x64_sys_read+0x3e/0x50 [ 243.917915][T14038] do_syscall_64+0x39/0x80 [ 243.922376][T14038] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 243.928312][T14038] RIP: 0033:0x418d8c [ 243.932200][T14038] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 243.951893][T14038] RSP: 002b:00007efdaae5e170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 243.960293][T14038] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000418d8c [ 243.968249][T14038] RDX: 000000000000000f RSI: 00007efdaae5e1e0 RDI: 0000000000000004 [ 243.976223][T14038] RBP: 00007efdaae5e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 243.984280][T14038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.992296][T14038] R13: 00007ffdf0498d2f R14: 00007efdaae5e300 R15: 0000000000022000 07:36:22 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:22 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:22 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0x2, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0x2, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:23 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0x5, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0x5, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:23 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r2) 07:36:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0x25, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:23 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0x25, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:23 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:23 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:23 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x300, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:23 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x300, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:23 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r2) 07:36:23 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0x2, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:23 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x502, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x502, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:23 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0x5, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:24 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x503, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x503, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:24 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:24 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0x25, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x504, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:24 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x504, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:24 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r2) 07:36:24 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:24 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x300, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x505, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:24 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x505, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:24 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x502, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:24 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x506, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x506, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:25 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:25 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x503, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:25 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x507, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x507, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:25 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r2) 07:36:25 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:25 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x504, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x508, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:25 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x508, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:25 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r2) 07:36:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x509, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:25 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x505, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:26 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:26 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x509, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:26 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x506, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:26 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x50a, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:26 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r2) 07:36:26 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:26 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x507, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:26 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x50b, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:26 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x50a, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:26 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x50c, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:26 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x50b, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:26 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r2) 07:36:27 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:27 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x508, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x50d, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:27 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x50c, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:27 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x50e, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:27 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x50d, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:27 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x509, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x50f, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:27 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x50a, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:27 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x50e, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:29 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r2) 07:36:29 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x510, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:29 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x50f, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:29 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x50b, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:29 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:29 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:29 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x510, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:29 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x50c, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:29 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x511, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:29 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x511, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:29 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x50d, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:29 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x512, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) [ 251.200897][ T9233] Bluetooth: hci0: command 0x0406 tx timeout [ 251.209564][ T9233] Bluetooth: hci1: command 0x0406 tx timeout [ 251.235633][ T9233] Bluetooth: hci2: command 0x0406 tx timeout [ 251.253198][ T9233] Bluetooth: hci4: command 0x0406 tx timeout [ 251.269178][ T9233] Bluetooth: hci5: command 0x0406 tx timeout [ 251.285588][ T9233] Bluetooth: hci3: command 0x0406 tx timeout 07:36:30 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r2) 07:36:30 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x512, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:30 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x50e, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:30 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x525, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:30 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:30 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:30 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x525, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:30 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x528, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:30 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x50f, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:30 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x528, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:30 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x510, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:30 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x548, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:31 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r2) 07:36:31 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x511, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:31 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x548, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:31 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x54c, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:31 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:31 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:31 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x512, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:31 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x54c, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:31 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x560, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:31 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x560, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:31 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x525, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:31 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x568, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:31 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r2) 07:36:31 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x528, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:31 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x568, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:31 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x56c, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:32 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:32 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x574, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:32 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x548, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:32 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x56c, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:32 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r2) 07:36:32 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x574, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:32 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x54c, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x57a, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:32 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x560, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:32 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x568, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:32 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x57a, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:33 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x56c, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:33 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x5fc, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:33 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x5fc, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:33 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:33 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r2) 07:36:33 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:33 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x574, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:33 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x600, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:33 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x600, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:33 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x700, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:33 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x57a, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:33 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x700, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:33 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x900, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:33 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x5fc, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:33 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:33 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x900, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:33 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0xa00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:33 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x600, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:33 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r2) 07:36:33 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:34 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0xa00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:34 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x700, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:34 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0xb00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:34 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0xc00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:34 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x900, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:34 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0xb00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:34 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:34 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0xd00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:34 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0xc00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:34 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0xa00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:34 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r2) 07:36:34 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:34 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0xd00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:34 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0xb00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:34 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0xe00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:34 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0xe00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:35 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0xc00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:35 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x1100, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:35 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:35 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x1100, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:35 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0xd00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:35 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x1200, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:35 executing program 0: r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:35 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:35 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x2100, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:35 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x1200, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:35 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0xe00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:35 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x2b00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:35 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x2100, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:35 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x1100, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:36 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:36 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x2b00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:36 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x2c00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:36 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x1200, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:36 executing program 0: r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:36 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:36 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x2c00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:36 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x2f00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:36 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x2100, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:36 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x3300, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:36 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x234e, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:36 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x2f00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:37 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:37 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x3a00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:37 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x2b00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:37 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x3300, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:37 executing program 0: r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:37 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:37 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x3b00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:37 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x3a00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:37 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x2c00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:37 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x3c00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:37 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x2f00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:37 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x3b00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:38 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:38 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x3300, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:38 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0xff00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:38 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x3c00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:38 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:38 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:38 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0xff00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:38 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x3a00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:38 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80002, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:38 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x3b00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:38 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80002, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:38 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80003, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:39 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:39 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x3c00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:39 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80003, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:39 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80004, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:39 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:39 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:39 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80005, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:39 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80004, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:39 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0xff00, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:39 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80005, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:39 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80002, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:39 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80006, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:40 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:40 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80006, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:40 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80007, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:40 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80003, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:41 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:41 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:41 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80008, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:41 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80004, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:41 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80007, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:41 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80009, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:41 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80008, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:41 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80005, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:42 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:42 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8000a, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:42 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80009, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:42 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80006, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:43 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:43 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8000a, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:43 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8000b, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:43 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80007, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:43 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:43 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8000b, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:43 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80008, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:43 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8000c, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:44 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:44 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8000d, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:44 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8000c, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:44 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80009, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:46 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:46 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8000d, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:46 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8000e, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:46 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8000a, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:46 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:46 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:46 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8000b, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:46 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8000f, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:46 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8000e, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:46 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8000f, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:46 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80010, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:46 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8000c, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:47 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:47 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80010, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:47 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8000d, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:47 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80011, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:47 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:47 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:47 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8000e, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:47 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80012, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:47 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80011, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:47 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8000f, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:48 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80025, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:48 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80012, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:49 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:49 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80010, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:49 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80025, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:49 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80028, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:49 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:49 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:49 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80028, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:49 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80048, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:49 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80011, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:49 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80012, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:49 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80048, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:49 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80025, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:50 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:50 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8004c, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:50 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80028, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:50 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8004c, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:50 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:51 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80048, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:51 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80060, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:51 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:51 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80060, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:51 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8004c, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:51 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80068, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:51 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80068, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:52 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:52 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8006c, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:52 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80060, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:52 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8006c, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:52 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:52 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:52 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80074, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:52 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80068, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:52 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80074, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:52 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8007a, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:52 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8006c, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:52 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8007a, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:54 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:54 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80074, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:54 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x800fc, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:54 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x800fc, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:54 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:54 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:54 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x801f4, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:54 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8007a, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:54 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80300, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:54 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x801f4, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:54 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80300, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:54 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x800fc, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:56 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:56 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x803e8, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:56 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x801f4, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:56 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x803e8, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:56 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:56 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:56 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80500, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:56 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80500, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:56 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80300, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:56 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80600, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:56 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80600, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:56 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x803e8, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:57 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:57 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80700, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:57 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80700, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:57 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80500, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:57 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:57 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:58 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80810, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:58 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80600, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:58 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80810, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:58 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80700, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:58 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80900, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:58 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80900, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:59 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:36:59 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80810, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:59 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80a00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:59 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80a00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:59 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:36:59 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:36:59 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80900, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:59 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80b00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:59 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80b00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:59 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80c00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:59 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80a00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:36:59 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80c00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:01 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:01 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80d00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:01 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80d00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:01 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80b00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:01 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:01 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:01 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80c00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:01 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80e00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:01 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80e00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:01 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80d00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:01 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80f00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:01 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80f00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:03 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:03 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80e00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:03 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x81008, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:03 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x81008, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:03 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:03 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:03 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x81100, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:03 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80f00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:03 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x81100, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:03 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x81200, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:03 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x81200, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:03 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x81008, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:05 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r2) 07:37:05 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x82500, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:05 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x82500, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:05 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x81100, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:05 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:05 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54f", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:05 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x82800, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:05 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x81200, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:05 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x82800, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:05 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x84000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:05 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x82500, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:05 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x84000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:07 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r2) 07:37:07 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x84800, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:07 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x82800, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:07 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x84800, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:07 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54f", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:07 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54f", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:07 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x84000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:07 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x84c00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:07 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x84c00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:07 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x84800, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:07 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x86000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:07 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x86000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:08 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r2) 07:37:08 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x84c00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:08 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x86800, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:08 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x86800, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:08 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54f", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:08 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54f", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:08 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x86c00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:08 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x86c00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:08 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x86000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:09 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x86800, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:09 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x87400, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:09 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x87400, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:10 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:10 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x86c00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:10 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x87a00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x87a00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:10 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54f", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:10 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x880fe, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:10 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x880fe, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:10 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x87400, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:10 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8d8ff, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8d8ff, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:10 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8e803, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:12 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:12 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x87a00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8e803, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:12 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8f401, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:12 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:12 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:12 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x880fe, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8f401, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:12 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8fc00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:12 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8d8ff, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8fc00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:12 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8fe80, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:14 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:14 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8e803, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:14 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8fe80, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:14 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8ff00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:14 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:14 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:14 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8f401, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:14 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8ffd8, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:14 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8ff00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:14 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8fc00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:14 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:14 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8ffd8, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:15 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r2) 07:37:15 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8fe80, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:15 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:16 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:16 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71a", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:16 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x3]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:16 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8ff00, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:16 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8ffd8, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x3]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:16 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:17 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r2) 07:37:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:17 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x5]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:17 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:17 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71a", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:17 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71a", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:17 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x5]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:17 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x6]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x6]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:17 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x7]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:17 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x3]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:19 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r2) 07:37:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x7]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:19 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x8]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:19 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:19 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71a", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:19 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71a", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:19 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x9]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x8]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:19 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x5]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:19 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0xa]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x9]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:19 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x6]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:19 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:19 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0xb]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0xa]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:19 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x7]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:20 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71a", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:20 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x8]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0xb]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:20 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0xc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:20 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:20 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0xc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:20 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0xd]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:20 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x9]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0xd]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:20 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0xe]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:20 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:21 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:21 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0xa]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:21 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0xf]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0xe]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:21 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:21 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:21 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x10]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0xf]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:21 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0xb]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:22 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x11]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:22 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x10]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:22 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0xc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:23 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:23 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:23 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x12]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:23 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0xd]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x11]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:23 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:23 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0xe]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x12]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:23 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x25]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:23 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0xf]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x25]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:23 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x28]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:24 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:24 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x28]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:24 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x48]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:24 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x10]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:24 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd2996", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:24 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x11]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:24 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x4c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x48]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:24 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x12]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:24 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x60]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:24 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:26 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd2996", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:26 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x4c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:26 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x25]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:26 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x68]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:26 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd2996", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:26 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x28]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:26 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x60]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:26 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x6c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:26 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x74]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:26 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x68]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:26 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x48]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:26 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:27 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd2996", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:27 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x7a]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:27 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x4c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x6c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:27 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd2996", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:27 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0xfc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x74]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:27 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x60]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:27 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x7a]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:27 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x68]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:28 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:28 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd2996", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:28 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x6c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:28 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0xfc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:28 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", 0x0}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:28 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r2) 07:37:28 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x3]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:28 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x74]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:28 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:28 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x7a]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:30 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", 0x0}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:30 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x3]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:30 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x5]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:30 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0xfc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:30 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", 0x0}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:30 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r2) 07:37:30 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:30 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x6]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:30 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:30 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:30 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x7]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:30 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x5]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:31 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", 0x0}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:31 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x8]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:31 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x6]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:31 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x3]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:31 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", 0x0}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:31 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r2) 07:37:31 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x7]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:31 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x9]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:31 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:31 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x5]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:31 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0xa]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:31 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x8]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:32 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", 0x0}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:32 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0xb]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:32 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x6]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:32 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x9]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:32 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:32 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x7]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0xa]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:32 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0xc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:32 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x8]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:32 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0xd]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0xb]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:33 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:33 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0xe]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:33 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x9]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:34 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:34 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0xc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:34 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:34 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0xa]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:34 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0xf]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:34 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x10]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:34 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x11]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:34 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0xd]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:34 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0xb]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:35 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:35 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0xe]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:35 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0xc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:35 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:35 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x12]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:35 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:35 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0xf]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:35 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0xd]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:35 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x25]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:35 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x10]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:35 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0xe]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:35 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x28]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:36 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:36 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0xf]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:36 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x11]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:37 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:37 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x48]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:37 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x12]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:37 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x10]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:37 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b7"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:37 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x11]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:37 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x4c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:37 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x25]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:37 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x12]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:38 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b7"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:38 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x28]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:38 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x60]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:38 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:38 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x25]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:38 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x48]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:38 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x68]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:38 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b7"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:38 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x6c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:38 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x4c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:38 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x28]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:38 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x74]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:39 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b7"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:39 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x60]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:39 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x48]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:39 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x7a]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:39 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:39 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x68]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:39 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x4c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:40 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b7"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:40 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0xfc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:40 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x6c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:40 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x60]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:40 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x74]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:41 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b7"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:41 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x68]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:41 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:41 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x7a]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:41 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:41 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:41 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x6c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:41 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:41 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0xfc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:41 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x74]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:41 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x3]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:41 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:42 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:42 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x7a]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:42 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:42 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:42 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x5]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:42 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:42 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0xfc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:43 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:43 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x6]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:43 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:43 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x3]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:43 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:43 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:43 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:43 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:43 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x7]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:43 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:44 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x5]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:44 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x3]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:44 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:44 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x8]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:44 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x6]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:44 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:44 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x9]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:45 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:45 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x7]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:45 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x5]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:45 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0xa]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:45 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:45 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x8]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:45 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x6]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:46 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:46 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0xb]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:46 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x7]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:46 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x9]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:46 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0xc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:46 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:46 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0xd]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:46 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0xa]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:46 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x8]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:47 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:47 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0xe]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:47 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x9]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:47 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0xb]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:47 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:47 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0xc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:47 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0xf]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:47 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0xa]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:48 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:48 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0xb]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:48 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0xd]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:48 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x10]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:48 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:48 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x11]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:48 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0xe]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:48 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0xc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:49 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:49 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0xd]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:49 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x12]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:49 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0xf]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:49 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:49 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0xe]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:49 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x10]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:49 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x25]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:49 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:50 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0xf]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:50 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x11]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:50 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x28]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:50 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89d"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:50 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x12]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:50 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x48]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:50 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x10]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:51 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89d"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:51 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x11]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:51 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x4c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:51 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x25]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:51 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:51 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x12]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:51 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x60]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:51 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x28]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:52 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89d"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:52 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x68]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:52 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x25]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:52 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x48]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:53 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89d"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:53 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x28]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:53 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x4c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:53 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x6c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:53 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:53 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x60]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:53 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x48]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:53 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x74]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:53 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89d"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:53 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x68]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:53 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x4c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:53 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x7a]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:54 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89d"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:54 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:54 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x6c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:54 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x60]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:54 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0xfc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:54 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x68]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:54 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:54 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x74]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:55 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:55 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:55 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x6c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:55 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x7a]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:56 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:56 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x74]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:56 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0xfc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:56 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x3]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:56 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:56 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x7a]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:56 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:56 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:56 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:56 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:56 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0xfc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:56 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x5]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:57 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:57 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:57 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x3]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:57 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x6]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:57 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:37:57 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:57 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:57 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x7]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:58 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:58 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x3]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:58 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x5]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:58 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x8]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:59 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:37:59 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:37:59 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x6]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:59 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:59 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x9]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:59 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x5]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:59 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x7]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:59 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0xa]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:59 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:37:59 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0xb]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:59 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x8]}}, 0x80, 0x0}}], 0x1, 0x0) 07:37:59 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x6]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:00 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:00 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0xc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:00 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x9]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:00 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x7]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:00 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0xa]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:00 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x8]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:00 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0xd]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:01 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:01 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0xb]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:01 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0xe]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:01 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x9]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:02 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:02 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0xc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:02 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0xa]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:02 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0xf]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:02 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:02 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0xd]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:02 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:02 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0xb]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:03 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:03 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0xe]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:03 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x11]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:03 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0xc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:03 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0xf]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:03 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x12]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:03 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:03 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0xd]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:04 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:04 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:04 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0xe]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:04 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x25]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:05 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:05 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x11]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:05 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0xf]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:05 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x28]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:05 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:05 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x48]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:05 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:05 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x12]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:07 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:07 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x4c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:07 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x25]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:07 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x11]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:07 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:07 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:07 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x12]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:07 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x60]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:07 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x28]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:07 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x68]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:07 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x25]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:07 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x48]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:08 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:08 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x6c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:08 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x28]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:08 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x4c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:08 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:08 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x48]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:08 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x74]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:08 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x60]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:08 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:08 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x7a]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:08 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x4c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:08 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x68]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:09 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0xfc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:09 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x60]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:09 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x6c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:10 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, 0x0, 0x0, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:10 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:38:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x74]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:10 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x68]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:10 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, 0x0, 0x0, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x7a]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:10 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x6c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:10 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:10 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x74]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0xfc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:10 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x80, 0x0}}], 0x1, 0x0) [ 351.695761][T18399] syz-executor.3 sent an empty control message without MSG_MORE. 07:38:11 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:11 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x7a]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:11 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:38:11 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, 0x0, 0x0, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:12 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, 0x0, 0x0, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:12 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0xfc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:12 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:12 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, 0x0, 0x0, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:12 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:13 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:13 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:38:13 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:13 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:13 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, 0x0, 0x0, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:13 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:13 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:13 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:13 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:13 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:13 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:13 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:13 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:13 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:13 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:15 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:15 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0xb]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:15 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:15 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:15 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:15 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0xc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:15 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:15 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0xd]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:15 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:16 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:16 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:16 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0xe]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0xb]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:16 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:16 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0xc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:16 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0xf]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:16 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0xd]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:16 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:16 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:17 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0xe]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:17 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x11]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:17 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0xb]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:17 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:17 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x0, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0xf]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:17 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0xc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:17 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x12]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:17 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:17 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0xd]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:18 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:18 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x28]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:18 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0xe]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:18 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x11]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:18 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x0, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:19 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x0, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x12]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:19 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0xf]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:19 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x48]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:19 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:19 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x4c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:20 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:20 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x60]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x28]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:20 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x11]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:20 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x0, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:20 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x0, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x48]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:20 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x68]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:20 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x12]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x4c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:21 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x6c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:21 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:22 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:22 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x60]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:22 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x74]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:22 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x28]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:22 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:22 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x0, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:22 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x68]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:22 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x48]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:22 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x7a]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:22 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x4c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:22 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x6c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:22 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0xfc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:23 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:23 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x60]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x74]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:23 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:38:23 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:23 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x7a]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:24 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:24 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x68]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0xfc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:24 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:24 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x6c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:25 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:38:25 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:25 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x74]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:25 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:25 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:25 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:25 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x7a]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:25 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0xfc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:25 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:27 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:27 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:38:27 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:27 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:27 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:27 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:27 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:27 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:27 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:28 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:28 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:28 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:28 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:28 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:28 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:28 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:29 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:29 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:29 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:30 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:30 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:30 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:30 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:30 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:30 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:30 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:30 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:30 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:30 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:30 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:30 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:32 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:32 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:32 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:32 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:32 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:32 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:32 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:32 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:34 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:34 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:34 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:34 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:34 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:34 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:34 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:34 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:34 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:34 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:34 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:34 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x28]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:35 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:35 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:35 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x28]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:35 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:35 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:35 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:36 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:36 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:36 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:36 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:36 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:36 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:36 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:37 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:37 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:37 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:37 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:37 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:37 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:37 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:37 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:37 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:37 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x28]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:37 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:37 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:39 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:39 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:39 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:39 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:39 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:39 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:39 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:39 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:39 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:38:39 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:39 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:39 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:38:40 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:40 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:40 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:40 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:40 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:40 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:40 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:40 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:40 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:41 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:41 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:41 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:42 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:42 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:42 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:42 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:42 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:42 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:42 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:38:42 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:42 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:42 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:42 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:42 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:44 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:44 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:44 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:44 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:44 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:44 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:44 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:44 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:44 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:44 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:44 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:44 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:46 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:46 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:46 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:46 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:46 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:46 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:46 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:46 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:46 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:46 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:46 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:46 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:48 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:48 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:48 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:48 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:48 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:48 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:48 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:48 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:48 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:48 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:48 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:48 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:49 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:49 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:49 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:49 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:49 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:49 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:49 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:49 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:49 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:49 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:49 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:49 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:51 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:51 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:51 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:51 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:51 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:51 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:51 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:51 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:51 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:51 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:51 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:51 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:52 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:52 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:52 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:52 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:53 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:53 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, 0x0, 0x1000) 07:38:53 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:53 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:53 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:53 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:53 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:53 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:53 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:53 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:53 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:53 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:54 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, 0x0, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:55 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, 0x0, 0x1000) 07:38:55 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:55 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:55 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:55 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:55 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:55 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:55 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:55 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:38:55 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:38:55 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:56 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, 0x0, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:56 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, 0x0, 0x1000) 07:38:56 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:56 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:56 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:58 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:58 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:58 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:58 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:58 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, 0x0, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:58 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:58 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:58 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:58 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:58 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:58 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:58 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:59 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:38:59 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:59 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:59 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:38:59 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:38:59 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:59 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:59 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:59 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:38:59 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:59 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x80, 0x0}}], 0x1, 0x0) 07:38:59 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:01 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:39:01 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:01 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:01 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:01 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:39:01 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:39:01 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:01 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:01 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:01 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:01 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:01 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:03 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:39:03 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:03 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:03 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:03 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:39:03 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:39:04 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:04 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:04 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:04 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:04 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:04 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:05 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:39:05 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:05 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:05 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:05 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:39:05 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:39:05 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:05 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:05 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:05 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:05 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:05 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:06 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) dup2(0xffffffffffffffff, r3) 07:39:06 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:06 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:06 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:07 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:39:07 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:39:07 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:07 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:07 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:07 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:07 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:07 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:08 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, 0x0, 0x0) dup2(0xffffffffffffffff, r3) 07:39:08 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:08 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:08 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:08 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getnetconf={0x14, 0x52, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:39:08 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:39:08 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:08 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:08 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:08 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:08 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:08 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:10 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, 0x0, 0x0) dup2(0xffffffffffffffff, r3) 07:39:10 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:10 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:10 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:39:10 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:39:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:10 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:10 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:10 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:10 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:12 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, 0x0, 0x0) dup2(0xffffffffffffffff, r3) 07:39:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:12 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:12 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:12 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:39:12 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:39:12 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:12 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:12 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:39:12 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:39:14 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}], 0x2) dup2(0xffffffffffffffff, r3) 07:39:14 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:14 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:14 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:14 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:39:14 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:39:14 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:14 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:14 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:14 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:14 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:14 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:15 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}], 0x2) dup2(0xffffffffffffffff, r3) 07:39:15 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:15 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:15 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:39:15 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:39:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:15 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty}, 0x80, 0x0}}], 0x1, 0x0) 07:39:15 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:16 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:16 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:17 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="06"]) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0xc0010141, 0x0, 0x80000021, 0x0, 0x484]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) readv(r8, &(0x7f0000000ac0)=[{0x0}, {0x0}], 0x2) dup2(0xffffffffffffffff, r3) 07:39:17 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:17 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:17 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) 07:39:17 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="e6895bb7adb4a494174eb093e4068675f448b9c5406a17ad57391a66f29f4cc162d503e7430935b4efbb2fd87f8d29c7bee920415442ecc9b44ebadd8fb929654b902c7afaeabcdfb53605a8d0949d0372b220cd9069dcb8266e65647eb869e95f9f2b61880e7b7e9c55d1c89e2629e470724d1727c91b205d484fb0bc81cb8e9b4115462a3b407a565962101b396fb79bb5d6ab52556dc1e95c1592f5ce861be6bcf089124b86cf639a665022ceab1a74096c1956c507633e5c14e5572b96b2d54fa78599b9fee8eb35bc1d6632004e6a9fcd2137a71ac4f9dd299661", &(0x7f0000000500)=@buf="f338db2e965e545b2ec593fe3c54308eb87bec0393e142eb1f0bee10a7e079a43dcabdc6a3119ded0f0349b78600d16ca82521c0f9461b145e285f89e7bac7dcc502576cd311c4ff749728fd2c50555fa89dd9c435ef60"}, 0x20) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x800, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000044}, 0x1000) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x0]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x4, [0x9679, 0x0, 0x8000, 0x2, 0xad, 0x1f3]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x7, 0x1, 0x0, [@private2, @mcast2, @private1, @empty]}}}], 0x108}}], 0x2, 0x0) 07:39:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:17 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:17 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x80, 0x0}}], 0x1, 0x0) 07:39:17 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x80, 0x0}}], 0x1, 0x0) [ 418.608534][T20723] ================================================================== [ 418.616658][T20723] BUG: KCSAN: data-race in af_alg_sendmsg / af_alg_wait_for_data [ 418.624420][T20723] [ 418.626738][T20723] write to 0xffff88810dd3d554 of 1 bytes by task 20742 on cpu 1: [ 418.634439][T20723] af_alg_sendmsg+0xbb1/0xd10 [ 418.639119][T20723] skcipher_sendmsg+0x71/0x80 [ 418.643805][T20723] __sys_sendto+0x2a8/0x370 [ 418.648310][T20723] __x64_sys_sendto+0x74/0x90 [ 418.652989][T20723] do_syscall_64+0x39/0x80 07:39:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, 0x0}}], 0x1, 0x0) [ 418.657668][T20723] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 418.663576][T20723] [ 418.665898][T20723] read to 0xffff88810dd3d554 of 1 bytes by task 20723 on cpu 0: [ 418.673522][T20723] af_alg_wait_for_data+0x1b0/0x3c0 [ 418.678722][T20723] skcipher_recvmsg+0x17a/0x7f0 [ 418.683584][T20723] __sys_recvfrom+0x1d7/0x2a0 [ 418.688269][T20723] __x64_sys_recvfrom+0x74/0x90 [ 418.693116][T20723] do_syscall_64+0x39/0x80 [ 418.697540][T20723] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 418.703441][T20723] 07:39:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}, 0x80, 0x0}}], 0x1, 0x0) [ 418.705755][T20723] Reported by Kernel Concurrency Sanitizer on: [ 418.711981][T20723] CPU: 0 PID: 20723 Comm: syz-executor.3 Not tainted 5.11.0-rc5-syzkaller #0 [ 418.720741][T20723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.730822][T20723] ================================================================== [ 418.738963][T20723] Kernel panic - not syncing: panic_on_warn set ... [ 418.745535][T20723] CPU: 0 PID: 20723 Comm: syz-executor.3 Not tainted 5.11.0-rc5-syzkaller #0 [ 418.754370][T20723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.764419][T20723] Call Trace: [ 418.767692][T20723] dump_stack+0x116/0x15d [ 418.772022][T20723] panic+0x1e7/0x5fa [ 418.775910][T20723] ? vprintk_emit+0x2e2/0x360 [ 418.780585][T20723] kcsan_report+0x67b/0x680 [ 418.785091][T20723] ? kcsan_setup_watchpoint+0x472/0x4d0 [ 418.790673][T20723] ? af_alg_wait_for_data+0x1b0/0x3c0 [ 418.796044][T20723] ? skcipher_recvmsg+0x17a/0x7f0 [ 418.801075][T20723] ? __sys_recvfrom+0x1d7/0x2a0 [ 418.805921][T20723] ? __x64_sys_recvfrom+0x74/0x90 [ 418.810947][T20723] ? do_syscall_64+0x39/0x80 [ 418.815540][T20723] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 418.821623][T20723] ? local_bh_enable+0x1b/0x20 [ 418.826382][T20723] kcsan_setup_watchpoint+0x472/0x4d0 [ 418.831753][T20723] ? _raw_spin_unlock_bh+0x33/0x40 [ 418.836867][T20723] af_alg_wait_for_data+0x1b0/0x3c0 [ 418.842077][T20723] ? wait_woken+0x70/0x70 [ 418.846408][T20723] skcipher_recvmsg+0x17a/0x7f0 [ 418.851262][T20723] ? aa_sock_msg_perm+0x87/0x120 [ 418.856200][T20723] __sys_recvfrom+0x1d7/0x2a0 [ 418.860886][T20723] ? __se_sys_futex+0x2a8/0x390 [ 418.865740][T20723] ? __fget_light+0x219/0x260 [ 418.870413][T20723] ? __fpregs_load_activate+0x103/0x1f0 [ 418.875952][T20723] __x64_sys_recvfrom+0x74/0x90 [ 418.880796][T20723] do_syscall_64+0x39/0x80 [ 418.885208][T20723] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 418.891101][T20723] RIP: 0033:0x465b09 [ 418.894986][T20723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 418.914598][T20723] RSP: 002b:00007f52ff6ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 418.923006][T20723] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 418.930977][T20723] RDX: 0000000100000345 RSI: 0000000020000140 RDI: 0000000000000005 [ 418.938949][T20723] RBP: 00000000004b069f R08: 0000000000000000 R09: 0000000000000000 [ 418.946918][T20723] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 418.954888][T20723] R13: 00007ffeb03f413f R14: 00007f52ff6ff300 R15: 0000000000022000 [ 418.963438][T20723] Kernel Offset: disabled [ 418.967760][T20723] Rebooting in 86400 seconds..