25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24008084) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x0) 23:20:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x4, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, &(0x7f0000000200)={0x7, 0x5b79072c, 0x7, 0x8, 0x8, 0x7f}) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f00000001c0)=0x200, 0x4) 23:20:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000066002000669264ce471b864d84f78018c42a625cc6d478705dd46fb5f6030de5cd7983002f3613958c3a59d46f478d7b591e3db1e27918f0bac5e425b79c78ba7a5d4589d4d90301b3bfb2707f577083ac6e31dee97535e74b09041c7ee578d2f4de6697f6d1def16084b10d2f23a36069650d251fc20de97b4dce2b1b8dcfe391411426fe5e48bde09966ddcb667ab8ca26381bef3a2b8d48832598eba8e15db4ec29b5f05d7a554af3"], 0x1c}}, 0x0) syz_open_dev$audion(&(0x7f00000000c0), 0x2, 0x139000) 23:20:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}]}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x50, 0x0, 0xf10, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x84}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x4040000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRESHEX=r1], 0x2c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x14008800) 23:20:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES16=r1], 0x1c}}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x400, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x200009a0) 23:20:17 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) socketpair(0x0, 0x800, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000180), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r2) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x12080001}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r3, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) 23:20:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x81, 0x101300) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001900000240ff03020c000400000800100001000000050014000900000014000500fe8000000000000000000000000000aa0ff4322fef5c2d406508342745d96b239dab8556422b0cb93025ef4eb804d4b0853300"/98], 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x8811) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x0) 23:20:17 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@bridge_getvlan={0x50, 0x72, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0xce5ed53b6a8e04fb}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000100) inotify_rm_watch(0xffffffffffffffff, r2) 23:20:17 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) 23:20:17 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="0100002f969cdaffffff18000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x244, r0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fe010ef}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x43}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf148}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x68e}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fffffff}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3b2327e3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x4000015}, 0xf0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) 23:20:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="170000e1398c58670011a2e4fc3634824f85c7bc675f6f3e007d"], 0x2c}}, 0x0) 23:20:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00008494fd1796897e0e6d7100000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 23:20:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1700000011007dbc814ab427b1171488"], 0x2c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 23:20:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6aff00f80f007d"], 0x2c}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 23:20:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f00000002c0)=0x1000, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r3) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1b4, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @private1, 0xec}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6eb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff7}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000004}, 0x880) 23:20:18 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x464, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x74bc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_NODE={0x1b4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0x8b, 0x3, "76cfed0f0a839ed23e060b0e2555be6a576aa1f9999270b8de763098461ef52e2cb97a00fad9bed0afcf4f225ed4403bbfa8c81a0cdac192e2a10c92d0b4fe0db50d18918c8d7377a14b06e498a1c801a663f25438e96586564ed8cb58088b2cb034c29ee1f39c8e5f7eb2fcaa6fc5a1f56df00944730af7c3dcc37821dde95d5057878e2cc570"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "c1ebd54a409a1847ca02a79f860229dff82eb807fffb156809e51335ef7a0dce"}}, @TIPC_NLA_NODE_ID={0xd0, 0x3, "5fcc0c7bf0c43c4635c3750f5f56bd890a493a1d74478fc99a035113e4c8622c04fe527c5d99817d122d3605c0e240a40e5ebad5754b6e49622b30f91cb1ed48597f32d2e3825d1856061b520180334b19932651596f8692e01891fbef5cd03b18e582c11d3731daa0ee2bb089de934d39e49f9ed68fc4ed35b491e6707aa01207fb465313d7c7235dab48559683f8de98317655231bd294d852848c062714c26d6e395f4fa3a2de9de130755c91cbbfad51a2b54897dd3a6f03b9f505f58d095de7a9431ba5620ec96c9172"}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x78d4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffa}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffc01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfc}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1ff, @rand_addr=' \x01\x00'}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ee}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe9d3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe24}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9a9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000000}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}]}]}, 0x464}, 0x1, 0x0, 0x0, 0x20008080}, 0x88) 23:20:18 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000024c0)={'syztnl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x20, 0x7800, 0x7, 0x100, {{0x3c, 0x4, 0x2, 0x25, 0xf0, 0x65, 0x0, 0x72, 0x2d, 0x0, @remote, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x99, 0x1, 0x3, [{@private=0xa010100, 0x5}]}, @rr={0x7, 0x1f, 0xaa, [@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @local, @rand_addr=0x64010102, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0xc, 0xb1, 0x1, 0x3, [{@multicast2, 0x1}]}, @generic={0x44, 0x3, "fb"}, @ssrr={0x89, 0x13, 0xa5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, @private=0xa010101, @remote]}, @timestamp_prespec={0x44, 0x1c, 0xb1, 0x3, 0x5, [{@rand_addr=0x64010101, 0x8}, {@local, 0x6}, {@private=0xa010100, 0x1}]}, @ssrr={0x89, 0x27, 0x8, [@empty, @dev={0xac, 0x14, 0x14, 0x44}, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010101, @remote, @multicast2, @empty]}, @lsrr={0x83, 0x2b, 0x23, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @local, @empty, @remote, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x2f}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x1f, 0x21, [@multicast2, @local, @remote, @local, @rand_addr=0x64010101, @loopback, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r1, 0x29, 0x8f, 0x20, 0x8, 0x31, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2, 0x40, 0x20, 0x1, 0x6}}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x0, [0x1], 0x6}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) 23:20:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='}\x00\x00\x00\x00\x00\x00'], 0x2c}}, 0x0) 23:20:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000010ed0a8af7c1f0f88614f9effbe06ad7b90ff5792667d5721091d5c55939eb603ae00064a346dd6f5cdb995415c38f8c108b6a279c66e395a6f1dc96cc246fe0e23b0dbfa8da80ff971be819ed2e00c0f2a953fdd8e443e5585a7cd645d07691ac9db93f280a30b335e282a1a9f696f4b1aee01a72dae2ff89807a57d94bf923a0ae1e9c6f1160a04caab9e3add45a67db6aea77111dfee38102c36a32bb82ce2317950a444b0c584086"], 0x2c}}, 0x0) 23:20:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000000)={[{0x8000, 0x1f31, 0x80, 0x7, 0x1, 0x4, 0x9, 0x3, 0x8, 0x4, 0x7f, 0x6, 0x4}, {0x5, 0x1, 0xf9, 0x1, 0x0, 0x9, 0x7f, 0x0, 0x9, 0x53, 0x9d, 0x40, 0x2}, {0x4, 0x7, 0x0, 0x3f, 0x4, 0x2, 0x2a, 0x7c, 0x3, 0x20, 0x7d, 0x9, 0x5}], 0x100}) 23:20:18 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@any, 0x2}, 0x4, 0x8, 0x0, 0x965, 0x400000, 0x10001, 0x0, 0x80000001}) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000000), 0x2) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 23:20:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044}, 0x20008090) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) 23:20:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x9, 0xa, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) sendto$isdn(r1, &(0x7f0000000180)={0x6, 0x1, "a5de5ef7bf8e45ae1f292ec43225b860640bc81e584d3793c35069020f0fb2e3c57ad8497b66dc1a5e34925c3f0d1740dced0bf55b3fb4830d3e210ef1f0edec0d9b4c20c790af927eed9f462d3ed184d9ef5e86a6dfe4bb68dde4f4ff4308e6f85e7179528e480ed088a9e2"}, 0x56, 0x240000c5, &(0x7f0000000100)={0x22, 0x6, 0x1, 0x1, 0x5}, 0x6) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000040)=0xfffffff7) r2 = accept(r1, 0x0, &(0x7f0000000080)) sendmsg$nl_crypto(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@upd={0xf0, 0x12, 0x2, 0x70bd26, 0x25dfdbfe, {{'ecb(cipher_null)\x00'}, '\x00', '\x00', 0x2000, 0x200}, [{0x8, 0x1, 0x9}, {0x8, 0x1, 0x1}]}, 0xf0}, 0x1, 0x0, 0x0, 0x90}, 0x24004045) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r2) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffff}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x87e8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000010) 23:20:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="17005352b664cb22e005fb65e3f32cc3cbfd012023b7000040941a9c3dffebbf9166f477b314ba9ddaa0abfd371caa845ccbcbb25467d00e9d8a456637642b3b1db7ffe172966fa7"], 0x2c}}, 0x0) 23:20:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000300)={0x7fffffff, 0x73, 0x81, 0x6}, 0x10) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ipvlan1\x00', @ifru_map}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000ffffeb00", @ANYRESHEX], 0x2c}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = accept(r3, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000100)=0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000024c0)={'syztnl0\x00', 0x0}) getsockname(r0, &(0x7f0000001180)=@can={0x1d, 0x0}, &(0x7f0000001200)=0x80) r6 = accept(r4, 0x0, &(0x7f0000000200)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', r5, 0x29, 0x7, 0x0, 0x1, 0x8, @rand_addr=' \x01\x00', @loopback, 0x40, 0x20, 0x525a, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000012c0)={'syztnl2\x00', &(0x7f0000001240)={'ip6gre0\x00', r5, 0x4, 0x3, 0x7, 0xd63f, 0x2, @private0, @mcast1, 0x80, 0x7f08, 0x7, 0x6}}) 23:20:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) 23:20:18 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) socket$nl_route(0x10, 0x3, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 23:20:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000c9dda431fff603a4d0c418b66f158610007d0000"], 0x2c}}, 0x4c884) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000200)={0x0, @rc={0x1f, @any, 0x4}, @rc={0x1f, @none, 0x22}, @l2tp={0x2, 0x0, @empty, 0x1}, 0x9, 0x0, 0x0, 0x0, 0xfc01, &(0x7f00000001c0)='macsec0\x00', 0x0, 0xffffffff7fffffff, 0x8001}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x40004) 23:20:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYRES16=r0], 0x1c}}, 0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10, 0x80800) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @host}, 0x10) 23:20:18 executing program 3: accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x2c}}, 0x0) 23:20:18 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x4000) 23:20:18 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x9}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x44011}, 0x0) getsockname$netlink(r0, &(0x7f0000000100), &(0x7f0000000140)=0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000040)=0x1c, 0x4) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)={0x40}) 23:20:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x18, 0xe3, 0x800, 0x2, 0xe6b, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x40) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000040)="9317d4dfa84f079190c2", &(0x7f0000000080)=@tcp=r2, 0x2}, 0x20) 23:20:18 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000240), 0x3, 0xc0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000280)={{0x4, 0x3f}, 0x5}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x4000}, 0x4000) 23:20:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000401) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) 23:20:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendto$llc(0xffffffffffffffff, &(0x7f0000000840)="0fbeef7dec143253e3b2a6a7142d0941fe6c3598ab0c664a9b7140a36575c2e215e009ed351ec814f7629f28f480e738bb00c546a17fc2af2f8ec83cce8b93fe5f8f016ccee08ca8b3492cb2803496e44c7af4a809cb182ddb42e063c7493012328096d105bd0f90fce4ab5ee259083e43f451f4d64ccf4bfa84b1a5547c14f787df28ccfc0e23ed3d814f58f167b6c27660568b40b80a112edc409561f2fd5d12306de3a5e968cfa88812bd14734adc32c6165ba3674c3c833ec89e7a6b06cb51d9b80a0f6f56a6c481f48bda212cb963dba4a84571ecaa96923999eef7e55f0783ce0e6915535ad4136c4107c399f19e21deda1b08f79327bf2731c4fdf7f7018095daec3787e952c1613f90494ffdd5141434566222324fbc3757d59b72cff1907ca1b89a0d4fa5fd321535d61583c192faa390b5ddffb4e52e9d8c89b00940c7cbfc0d5e0f33b4b1634777286cf4146b2001baba8e5cceccc3015fa36edd2eaa5ab2c1dac9ad02717afc0b82e2a8b3634f50dc0c682ddb70a5e5bd4b7182d530bd61cec6ec24bc28f55d47064a6629af08d9c89d750fc2be6a386d0c45f91776644299424f3ea6de8b21594a96304630e42c8002e3ab83b53e4b94ea419b3483a2d5734565e4029c0a2f5714267d5d104727504d89cd3107938a264553d21c37c51e284e0c3f91c7a19c465961939bbf216d9eeb5bdc8f966cbd7a24cc92de16c6d1c4190e5953e5fd694c3284bb755d5314eb380be402712afe3dc482010b7fe6dad6cc5ec72c4c91d33a4de76f73b0a29c20aec3f83bd7423db4c3d1d6fc1582733f264a1fa2dbd0cba8ed9925dadcdd68a02127c2d74daf5ba349337bb204e80c15ed0e720f7474d82f68e46d4a634305be2724651f4315df71cd65f789bd50856ea421608f7a999a65a4842c839a775fe090751bb38564c4e8db05a9f52b1cd7b954452858ee71eb6c04f192740c1e6e0db26f2b808641526a895dc8b0dd02eae98f92e0902f1420a49c2885908578782143905f68b3415eab6c0cad5d85dd4435743bc74f815f84f2dd08ca3373c205d6335f3a1cd25d028f44b674c308a2c75606ba0464a1538031c401ff58f5716a38115692981b8477d453fed6952d67628442dfd066f7fd051f6a7de5ddaf282b4bc377f55a66e680ca20aceef342be0cb17309970ca71849014eb470f7dbef9d7b37ba72deca0c94c99fe59ba670b7c9a0270a7a83398c40a4f2470890c6383f6f38205e2f46cc4a73a138d6fdc605fba0cc77ca6352584ab68751268a8361e03b4ca4d545be17252416aec5f34e9685bdf0c42acd16ccdced54cf1915162dd79248b114f51befd08fdbe21f3ccebee048d75f729dfa834dd54d32112b002ddef752bc6e513614d16c161ffdb64de7463e0d684d885e108865f6d2365d655fa5e1aa83fd85b9b9cd9138d71f4097b55c4726710619a7f3b74d2574fda4a83522c93ab23ebaa3ece76a735f3583facae5af9ef5582ea24adb8cfbd15be7dd55b8b00e0f11d7f981244a733d9a1ca2cd5079570309bdfc032dd92cb347ad14af5df70d4f982e7865936ecee19286beacb4b78a910d57dc3359c74e5b5af8f984a202ab0b0decae37ca0426f4528876a10f0cceff4caac11907975a10ac86a06225aa63c4b2a1a58f0d0d885d4d3c0cf7a007856b47b01689bf13bd3b88a1d1b736a6e5b29c777c716f2620d0821efe2342c4a0bbc08869f31e3873492c837fd47d086c3d7fb5b2daf51a3a45bbcf7c869b8319b34ce8ebd07976f043a2982eacc8d6b4291bd3ed22f9646a9fc862793d19fa27d3dbebf6a526d282ca4b2b5f06c20fb752f28d5bfa5e40abee24daa7921fb25b1b436dcec3918493f8f0bbfb73ec2940fe5d0b7001f64799a82ee0c4218a2debd55e92377d7401523d700ddfa7a484d9921fdb1afe927190a077504fdb0663b211b43981f8965770cd3988f828e5c50d1d2928dc5408adc524f088605c09e5e27b7104e9b35634820cd201b0a2ecd283c35ab39141e427444903ee45ac1399b3fbd15abaef905cc2f855282caa72d7c1f74a11bdab535ff859e1f8589a585eb16036d503bc16626d286049563d927ae5feeb0755b467c0714a47f2897a74497f36a0d10efc907c6b61cf3e305dc1e728eef90a0010f48f24b536f02eb36ab89adef6329fc90f4e3484b5de8f51cf62ac3bc8f7dbc73402b4a2061aea3f4e9a6f2aefed10a8cfab72bd192508858a726fca6d7982a02fa7a390ae3da241b2f9918e86bb1cf967ec1acf0693406a0335b0e85b184b050eacd8717e08c33cefcaf5dfabc7ced14cb8e58e45208672a44016f0cc5726696309b7a5503452ded883bb654ccb72b7e0037e210bcedd190c18f4f3536b860dfdca721d2974cf011c44d58c8056b6be1b10db8cf7189ea2a321e84b294abf4d5e5e3d547f13d5e061fd68ce4f26451673a1ba5352db7dfb9d036abf4ce40ccdc13d57bfb1d7eb664a617a32a9ac205c4bc2d01dd0e755ae25d80e32d846611b0a19d9b99ddc35d16447536f9f0f94c024b2cbad5608a865594f6b365673a40ff0301eb7a3b301d1166f1e6dc432eafa00a84be02586ee6747bbd7eedfa2c705c309f12e8c96aba309a325bcb2584afc1720ea4529ddea6b176723ac6173de165dd28ce23280d059652a088cd452bd72d79176249cdd0e864ca71de86c07c12c12f8a60a68ecb3a525005c5a5e9b1bb7edf602a7614ba73e0718821871bccd68ff79acac01d0f06847f7ee53858ae8fa0f5008e22b091c7386f6d6f5689b55492fabb153dc47f3a40655339d85aa4255a5ce2c77dc783cbaa66f1b91f62b7a4ec439c6abdbb23787e07f7fdcc336986302444929c16279d739cd25d4e53aed04848f0bd40b15936848d8d3e08d9336f177cc112fe2c986a8a9253f9d815dbae71f1c0bada6afa200c30bb0a20c592fba725d597f00f9f1944cfb6e097419e652ba71f293d3ae0163b1c7f278bfed9e58812e6bc06cbdf36c8b31921ec6b3693e8c3cd5213657905523b2451adf013dee64915741c0c1d19fbc1166d083af19f2758b337d3f861d5d20bbd10cd57daf91d885b6c02f70723d1895cac9d4e03c4b5f9087b1e5038d5a3899a608d48eb535551949b340423bf39df7e0496bd18ff7a7e8c286ebee450b3e7bd582bc366da2011439f77363b998e51c45fff4ab14a65f5c747cab2f57143e61d5675d69e35b52425ad279b9cc449fd572d3474a44962d7461729e9164951c0f5aa52a9bf80815601b03ecaab7368a3024fd2a4ce19550b5219143b7aae8a611f48fc4c6742d88d96f5d8824ab3f042dcafc861827f0f7ca1d0a56ec603bf6c62d17b5957631148b8ec27a285d263bc0facabf2009a9715be8089da28e57b3dfa0312e5a738df157ea2c29dfbce9a58fe99b8d83112d1e8348faf5c293e80fda7e2a036eaa199ac06c59032dee6418f8a9b1af9c82729bc9b34256da147be03d517d211edc536b4ad6b08ed06ea5c15c45087cb2a41307e1fb7b33109ba01ea584b49c294467891d0c5e63f97491b35b6342897e637f9aa71fa2e42608df994177a39b1063019c6104d5c8536d5e2cc07946242bd2e3d5ffee5ba26921133c8d28f85d2f4453e635578c7bba04ea8cf304c3417fe528b4c6b4f84ae04ebe8cbdcea9a76da186637d2cfe097f715058c1a3ebba3f1538664f844b10c0ab8bbf840a8d331f7c2a3541f3df6cd0c499091b9b1252a39afbc120609ad80e91a5fe0fa0875ef6128175838acad1244a377df27c218fe84192a9fc0490dccce080f55531f5f5bc3d838b770249f4e657dfe37ee3f243e9c1658b8c5440080491a02c0a70699f4df504a1068a20004947a0ac735c18308b5c6890406c0d071e25925707762509baa108a45f23bc3d05b057b184760864b61bb9f3bc9a4be58156944c856839c039103c0550674e1356642074640b4b84d75bc3922313e9d955aea6f8d3c94ed4da6027fc1eb22e9ddd5cbe0b1cd794c9ed27eb3ba8bc427ac1c643666176c1f9ae21e63deebd275b047933dbd2bcc255bc1301e3d8f9d82d6093afb12d2901549e9a677ac021fe04dd044a61315751d877b5a99e96b49170d066e0a964c1c5ae4bacaf5cdd234d4490451bd6230ccbd33f8b63369614cd817c0cf149718140e80316ca6c195a8db4870ce4aebf52b80e1dad354da882583554224da611969987ba1bd6f1194ecf68662acd6127d53089a9f7665f890f28c28ea0fb7f4da58a72a3184dc07a6d95ecc408ca2141a303a81be8bf8ced59187ed0eec03130ae79770fd0b57a5f169d79d4e66e8df63617d642abab06b893be2928d2455ec6e12c69602ac60d69d3a1ba48fb6f023ddc450079ed6808f89ae63f397e7b6490d173be0d54b0094807203cef53799ec9a4ff3f5d2dbc8e5c91a14e64e31275527557d2b8bdaf63e7adc22c9bbfc06f2b744d2c26817067691cc46725f140d88a29b5811ccb9bdff6232f4b75baf2d4ad2702459473607610d66e2d934ed1d8a4ccb43875c5efe063941d4df2cc65b2ed5c3c7ffd3b7c19f1646a4e5f13cb69b84d85d78a47e2764188ee28f9ee2c684124e83c21b5dcf651b427ddf90c29dc01ae33269c2a6ce9ea53e04c0dc61deefc6f3473b436c24ac50a4962cd45fd20533798c0e69e73378e364effd6b0d23e1522f26238755b42ce9f1ea10b751279fe5fd665cb474cb291d8930771c97fb8bbde12b8c6c9bb067976dbc0dfda52767863e500a28291c72bb4d7ecf0912fffda983629dac6476da394eda19284a0ff070364384f9a330df6aba4f8b2855877809dfa2e2e7c50d376d18618da41b794387a49278d4e7e8f1998baa2c4e3fc5db01ff3a2a80807449b389df112b820534a6e21b0677bb04e33383272a6c729a3946722704c77a9c7da3bc27de1a27e92dceeb1db1a65b63d3bef684852aa74fcc10925fc8c34e6792ad3f8be8eda97902906d333e8d112ba1a9ef9b72214e34ce8cd8272b2ff6102fdb8d55d58fe0f8f703d5737897fa3dba452bfd06eb1f3bc720b45b56d1cec1cb9e66ca3222356e3d4aeaaad7d0e6675919d0885ccd8d6394e2ee87f5c32a7d6c1b99b22a86d48cc5d4651b6d0148935740f639fc8aafc94197c0b01e8610e7f214433a7dab1c35fae531045f99040a784410ec287011196361ed9a7e4fba0eca0b4d5cccbf8e41f59ad075b59f489b9a6188bce134944f5707e7bc215f556762900d8f4203f488d2f24dd01f759114f4cbc748d458b56eaf849ae7fde24090ddfd5879656b93c7c19ec3adb2dfcda90759c685d3da212aa06291bd85d8bcc1f5aff578e399383fe26768a42c82814dc9c5a1e6d7980ae45b72c4c67a74947229089cc8c05f4ed88199c05f838a1dfc4971b05c829bdb1fdecadbc55730699943f0fa01fe3391bab09f7e3d0fd50932ea4a80f66924e8c9708bdebcc635a05b829b87b0291f6b4d8e8825585aac81b922aa205a8e8c65b453b91b905ed925e4e40bd7130e4c5ca50cbb23cf2a05c999cb66f440a57acefd882a1b648bb55d20f47a3e319379a7b0ff60c84a4ef31ad31c534bc46964ab09ffd6b65cd2415fb033081d86ba966c0bd58567f1d44a6bc822b01ecc885503f2226654eb8c73fc7b5e43a5d0711e58a5ded5d82fe19113100b884ce3a1cae30bd19131b69577dcf5062fcb5429ff4364b244f51a826db1ae6b815a21b7135f1341d1918334acf6db0153a4c31259ad4f8b4d9dcb4e258987b5ac2fb73532f9882f03c0c526fe169ba005999e7", 0x1000, 0x9840, &(0x7f0000000000)={0x1a, 0x30a, 0x5, 0x80, 0x7f, 0x7, @multicast}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) 23:20:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) 23:20:18 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0xffff, 0x1, 0xffffffff, 0x4]}) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0xb7, 0x0, 0x3, 0x7, 0x6d, 0x0, 0x3, 0x3, 0x20, 0x0, 0x6, 0x1f, 0x1}, {0x6, 0x8, 0x9, 0x7, 0x9, 0x2, 0x1f, 0x7, 0x7, 0x9, 0x0, 0x1, 0x1}, {0x7, 0x40, 0x7, 0x7, 0x4, 0x20, 0x80, 0x4, 0x3f, 0x80, 0xf7, 0x1, 0xed2}], 0xfffffffb}) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0x1f, 0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000000)={{0x0, 0x8}, 0x4}, 0x10) 23:20:18 executing program 0: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x200}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x5c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) 23:20:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="88d00dc7d2a30812cea5ab4161e8d05e1eda70206642e04b95570d05f23bb3dad100980297118c45a43f1ffb177d3825badd5a4fb266361a4f4c46c610919b3ae414c52eab5cff45145a407f43c52461726c3a111dd4186799a51c1863a3649aff9f478f6d5d6f6123120b44d7b697e6567489e0b0f69ea83e364884739faff2880cf7dd2eddfed1fbd03fc5013395ab97db62dee94ea30a597b2be9eb89d308d935e372b8d8fe952e5f876b8732"], 0x2c}}, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x30e, 0x5, 0x6, 0x1, 0x38, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x10) 23:20:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) 23:20:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x0, 0x204, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfcd}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:18 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r1 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000000)={0x9e, 0x7f, 0x1000, 0x5}, 0x10) 23:20:18 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000000)={0x4000000000000000, 0x8}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1788000011007d75c9e2b6f580bda541df7ff2a2b0d2644c744dd4298f7cd226c7b2b8ef0344feac7c56f026d76378d04bfd7496f6e48aa1de68a600a36fcc1ec06e2ccd8b7f1d781d4a8ad5"], 0x2c}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000002c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20000000}, @ethernet={0x1}, @phonet={0x23, 0x20, 0x1, 0x80}, 0x2, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)='team_slave_1\x00', 0x4, 0x1, 0x4}) socketpair(0x2b, 0x0, 0x9, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000240)={0x0, 'syz0\x00'}) sendto$llc(r0, &(0x7f0000000180)="87679df3f43715bb78cb1e2e76d648c5bc0f611f4a408d6d639182c4671f9881bbe2c8d7a018c562a9e0b4bb015e44d8fb4453a7f82c48d1c6fee3b5619c5e223dfbacaa386a2b687699491a8271dc3dd71ef1d830ec7e646346177cea3063a9dd2e9c5a15ac6531bce216beef4a594d223e6024d3b16d3042c199a8ea4939b8c1f99e8e67198e71bcba76107b7220ba8966a4d6807087d1aa4d83b577", 0x9d, 0x40850, &(0x7f0000000040)={0x1a, 0x17, 0x5f, 0x40, 0xee, 0x9, @local}, 0x10) 23:20:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) socketpair(0x9, 0x80000, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) eventfd(0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, &(0x7f0000000100)) accept(r0, &(0x7f0000000000)=@ieee802154, &(0x7f0000000080)=0x80) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c20000010007d"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 23:20:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRES64=r0], 0x2c}}, 0x0) 23:20:18 executing program 0: ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000000)={0x6, 0x8000, 0x5aa, 0x2, 0x7}) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x4, 0x1, 0x54, 0x0, 0x4e, 0x5, 0x8, 0x40, 0x8, 0xa2, 0x3b, 0x3, 0x7}, {0x198, 0x5, 0x8, 0xc4, 0x81, 0x7, 0x1, 0x1, 0x6, 0x4, 0x2, 0x40, 0x380000000}, {0x5, 0x80, 0x5, 0x1f, 0x5, 0x4, 0x0, 0x1, 0x6c, 0x80, 0xf9, 0x0, 0x8}], 0x9}) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24008095}, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0x0) [ 3207.711516] nla_parse: 32 callbacks suppressed [ 3207.711522] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3207.738976] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 23:20:18 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@dev, @in=@remote}}, {{@in6=@private2}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x28, &(0x7f0000000080)}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x140, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4000, @ipv4={'\x00', '\xff\xff', @local}, 0xa7c}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x32}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffe1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff650e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffbc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x404d804}, 0x20000000) r6 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) inotify_add_watch(r6, &(0x7f0000000480)='./file0\x00', 0x2) 23:20:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x4, 0x7fff, 0x5, 0x5}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000040)={@host, 0x3}) 23:20:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}, 0x1, 0x0, 0x0, 0x4000881}, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8c200000", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fddbdf250600000038000280040004000800010000100000080002000080000008000200020000000800020008000000080001000000008008000100f7df00002400058008000100657468000800010065746800070001006962000008000100657468001c000580080001007564700008000100657468000800010075647000"], 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x8050) 23:20:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x1c0, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5d77}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xe1f5, @mcast1, 0x3c9af1f6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "5dccc758724366462c32167bcfb9577ad16d1feb7d4149203d5fff6959"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "ae4567f90f0a9ca6779a216c605ccf94d6aef09bd7214b5460c2852a81a0dcebbd7481"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "fc9fc35fc756ef79be91a76d86d9425857a011c419db78b0ba78f0e2f5"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}]}, @TIPC_NLA_NODE={0x4}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4}, 0x10) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x8000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000440)=0x80) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) setsockopt$llc_int(r4, 0x10c, 0x5, &(0x7f0000000000)=0x800, 0x4) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x40002) [ 3207.816571] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 23:20:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1600800011007d", @ANYRESHEX], 0x2c}}, 0x0) r1 = accept(r0, &(0x7f0000000340)=@phonet, &(0x7f00000003c0)=0x80) sendmsg$nl_crypto(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e80000001200080025bd7000fedbdf256d6f72757336343000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002400000020000000000000000000000800010004000000119b87e366fe65d095486e5990c4c96c0d9fd1ea0260a24378cda2ed436b4a83551ddaea3c1d7c0fb8e1ea5830003853c19d9441a6d6b2753f53d70cc9a3a925698a3625b6edcb"], 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x6004) r2 = accept(r0, &(0x7f0000000040)=@phonet, &(0x7f0000000100)=0x80) sendmsg$nl_crypto(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@getstat={0xe0, 0x15, 0x1, 0x70bd2b, 0x25dfdbfb, {{'blake2s-128-arm\x00'}, '\x00', '\x00', 0x2400}, ["", "", "", "", "", "", "", "", "", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x240080c4}, 0x2400c054) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r3, 0x8915, &(0x7f0000000440)={'wg0\x00', @ifru_map}) 23:20:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x1) write$bt_hci(r0, 0x0, 0xa) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 23:20:18 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) ioctl$sock_ifreq(r1, 0x89b0, &(0x7f0000000080)={'bond0\x00', @ifru_addrs=@qipcrtr}) r2 = socket$netlink(0x10, 0x3, 0x7) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780fe9b06dde22d69980a9c611ff9f434603c3177fc67ffc87c86ac7d99aab415a972ea843e62efc9b8918a7b6434ab1655c3a8338a50ae25dd10f6c993a4c246864c3e690d27a8ac228f24266fe4fc4d53554594872e97c6c86c79ff31c89b9b10d1", @ANYRES64=r0, @ANYRESDEC=r4, @ANYRES64=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000811) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000005c0)={0x340, r3, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x144, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8e40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x62e6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe569}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffd23}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ID={0x74, 0x3, "88f704678166c915c5b9283a7a4c3bb47f1bde0ca46da1f7baa93dabae63062a79bc01cd828e9ce454d0155f1723f38118254040d0f20e2c94562513282883386da04ea4b48dbd226e979bd0af883480e907398f7dc7336aed022638da71298371ce6a4b1b8ce7ed59755b70dda8d29d"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "97f618abac346694647cc79d5485272af1cb1e6e09"}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4000000}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbccb}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x43}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1a3}, @TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x8000800}, 0x80) [ 3207.918608] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:20:18 executing program 2: openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000140)={{@any, 0xee}, 0x0, 0x1, 0xecde}) socket$nl_route(0x10, 0x3, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x60000200) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x18, 0x400000) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, &(0x7f0000000100)) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x200400) 23:20:18 executing program 4: socketpair(0x2b, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@loopback, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000300)={'erspan0\x00', r1, 0x80, 0x7, 0x5, 0x1ff, {{0x1d, 0x4, 0x2, 0x17, 0x74, 0x64, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @empty, {[@ssrr={0x89, 0x13, 0xc3, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @multicast2]}, @end, @timestamp_addr={0x44, 0x1c, 0x3b, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@remote, 0x10001}, {@multicast1}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x1f, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x1}, {@empty, 0x1}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0xd1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @noop]}}}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000d21d58647d11006f69e4b97f0000000000", @ANYRESHEX], 0x2c}}, 0x0) 23:20:19 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newlinkprop={0x60, 0x6c, 0x10, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x2100}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x7}, @IFLA_GRE_OKEY={0x8, 0x5, 0x800}, @IFLA_GRE_TTL={0x5, 0x8, 0x4}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x10000}, @IFLA_CARRIER={0x5, 0x21, 0xf9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000011) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)={'b', ' *:* ', 'rm\x00'}, 0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000200), 0x4, 0x80000) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000240)={0xff, 0x4}) [ 3208.022641] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:20:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x4, 0x10}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$llc(r2, &(0x7f0000000080)={0x1a, 0x201, 0x8, 0x5e, 0x9, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000100)=""/153) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000040)={0x5}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:19 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) socketpair(0x1e, 0x1, 0xb130, &(0x7f0000000000)) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x8000, @rand_addr=0x64010101}, 0x10) 23:20:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, &(0x7f0000000040)="128bdd95bd5667073420af2aaaebe1") sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000002c0)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0xe59}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x2c}}, 0x0) [ 3208.235435] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:20:19 executing program 4: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000200), 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000005c0)={0xa, 0x0, [{0xfff, 0x2, 0x0, 0x0, @irqchip={0x7, 0x5}}, {0x7fff, 0x2, 0x0, 0x0, @adapter={0x5, 0x6, 0x1, 0x9, 0x2}}, {0x9, 0x4, 0x0, 0x0, @irqchip={0x5}}, {0x7, 0x3, 0x0, 0x0, @adapter={0x0, 0x4, 0x3, 0x3f}}, {0x7, 0x1, 0x0, 0x0, @sint={0x58, 0x40}}, {0x4, 0x3, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0xfffffffe, 0x2, 0x0, 0x0, @sint={0x5, 0xfff}}, {0x6, 0x1, 0x0, 0x0, @adapter={0x401, 0x4, 0x81, 0x800, 0xfffffff6}}, {0xfffffff9, 0x1, 0x0, 0x0, @adapter={0x5b, 0x3, 0x6be, 0x0, 0x1}}, {0x4, 0x3, 0x0, 0x0, @irqchip={0x2, 0x1}}]}) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000040)={0x17}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x40, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x700, 0x800, 0xa}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"/495, @ANYRESHEX], 0x2c}}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x284000) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000400)=0x4) 23:20:19 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080), 0x2, 0x7080) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000001100)={&(0x7f0000000100)=[0x1, 0x0, 0xffff, 0x9, 0x3, 0xffffffff, 0x1f60, 0x480, 0x142d, 0x7e, 0x7, 0x196, 0x101, 0xfffffffc, 0x99, 0x6, 0x7fff, 0x1, 0x80000000, 0x9, 0x80000001, 0xfff, 0x8, 0x7fff, 0x3ee, 0x5, 0x7, 0xff, 0xb393, 0x0, 0x80000001, 0x80, 0x6, 0x80000000, 0x400, 0x7, 0x7fff, 0x8000, 0x6, 0x7, 0x785b, 0x8000, 0x4, 0x0, 0x4, 0x0, 0x3, 0x3, 0x81, 0x1, 0xd9f, 0x80, 0x8, 0x9, 0x7fffffff, 0x40, 0x8, 0x10001, 0x7f, 0x80000000, 0x5, 0x10001, 0x656, 0x4000, 0x9, 0x442, 0xf0, 0x6, 0xdd0, 0x6, 0xa1d8, 0x9, 0xf8, 0x0, 0x7ff, 0x1, 0x0, 0x80000001, 0x7, 0x2, 0x22c, 0xffffffff, 0x5, 0x9, 0x9, 0xfff, 0x2, 0x3ff, 0x4409, 0x4, 0x9, 0x7, 0x0, 0x6, 0x4, 0x7, 0x5, 0x7c743053, 0x3, 0x1000, 0x40, 0x8af9, 0x6, 0x7, 0x80000000, 0x0, 0x8, 0x5, 0x0, 0x7f, 0x74ff5342, 0x6, 0xffffff88, 0x0, 0x1ff, 0x2, 0x40, 0x1, 0x7, 0x4, 0xffffffff, 0x7fff, 0x80, 0x400, 0x80000000, 0x3, 0x0, 0x17, 0x1, 0x81, 0x3, 0x9, 0x2, 0x1, 0x70bd, 0x0, 0x1, 0x3, 0x7, 0x1, 0x5, 0x3, 0x8, 0x0, 0x9, 0xff, 0xd02, 0x6, 0x5, 0xd244, 0x7, 0x9, 0x9, 0x1b, 0x9, 0x7, 0x5, 0x200, 0x4ee2, 0x5a, 0x1, 0x5, 0x1, 0x5, 0x6, 0x7b, 0x401, 0x1, 0x6ca, 0x3, 0x2, 0x5, 0x10001, 0x7, 0x0, 0x0, 0x40, 0xffffff01, 0xd3, 0x91f8, 0x1, 0x2, 0x3ff, 0x2, 0x9, 0x2, 0x101, 0x0, 0xf7, 0x6cbe, 0x4, 0x8, 0x2000000, 0xe9d, 0x0, 0x6, 0xc3, 0x0, 0x9, 0x8, 0xd3a, 0xaf2, 0xfffffffd, 0x400, 0x1, 0xac68, 0x62, 0x9, 0x4, 0x5, 0x2, 0x7, 0xfffffff8, 0x80000000, 0x4802, 0x1, 0x200, 0x8, 0x80000000, 0x3, 0xeb, 0x6, 0x81, 0x41a6, 0x1, 0x6, 0x5, 0x3, 0x3c, 0x5, 0x4, 0x9, 0x33, 0x9, 0xfffffff7, 0x81, 0x7f, 0x81, 0x7fff, 0xe9da, 0x1, 0xfffffffa, 0x6, 0x1ff, 0x80, 0x200, 0x3, 0x8, 0x101, 0xfb, 0x1, 0x20000000, 0x2, 0x1, 0x40, 0x0, 0x0, 0x7, 0x3ff, 0x6, 0x8, 0x5eca, 0x6, 0x1000, 0x1000, 0x0, 0x6, 0x7, 0x7fffffff, 0x7fffffff, 0x7, 0xff, 0x9, 0x23, 0x1, 0x5, 0x2000000, 0x35, 0x7f, 0xbfe, 0x8, 0x6, 0x1, 0xfffffff9, 0x2, 0x101, 0x4c, 0x1, 0x101, 0x20, 0x9521, 0x1ff, 0x80000000, 0x0, 0x8001, 0x8, 0x7fff, 0x2, 0x10001, 0x3, 0x0, 0x6, 0x100, 0x1, 0xd8b3, 0x10, 0x1f, 0x1000, 0xfff, 0x400, 0x1, 0x5, 0x10001, 0xfffffd6b, 0x0, 0x4, 0x3, 0xc238, 0x3, 0x4, 0x739f, 0x8, 0x2, 0x938f, 0x400, 0x1, 0x1b, 0x0, 0x4, 0x0, 0xeadd, 0xe514, 0x8000, 0x800000, 0x6, 0x2, 0x101, 0xffff1fcf, 0x1, 0x8, 0xfff, 0x4, 0x80, 0x8, 0x1, 0x6, 0x400, 0xa3c3, 0x101, 0x9, 0x7031, 0x0, 0x9, 0x5, 0x78, 0x8001, 0xb3, 0x9, 0x10001, 0x4, 0x1, 0x7ff, 0x0, 0x3, 0x5, 0x2, 0x0, 0x5, 0x1d9, 0x4, 0x7, 0x4, 0x5, 0x6, 0x0, 0x6, 0x0, 0x8001, 0x1, 0x101, 0x8, 0xffffff73, 0x1, 0x0, 0x2, 0x1000, 0x4, 0x5, 0x7f, 0xd091, 0x4, 0x4, 0x2, 0x98, 0x8, 0xbc, 0x2, 0xffffffff, 0x1ff, 0x6, 0x0, 0x21f, 0x5, 0x9, 0xff, 0x7, 0x8, 0x401, 0x3ff, 0x80000000, 0x7fffffff, 0x7c8, 0x7e0dc3eb, 0x0, 0x3f, 0x6, 0x80, 0xfff, 0x100, 0x0, 0xea3f, 0x0, 0x2a, 0x10000, 0x401, 0x7, 0x20, 0x2, 0x40, 0x5, 0x401, 0xd9a, 0x8, 0x1, 0x1, 0xfff, 0x0, 0x8, 0x9, 0x7, 0x20, 0x4, 0x3, 0x1, 0x5, 0x7, 0x660, 0x5, 0x4, 0x9, 0x7, 0x2b, 0xfffffff7, 0x10001, 0x5, 0x80000001, 0x8, 0x2, 0xff, 0x100, 0x8, 0x54, 0x0, 0x8001, 0x0, 0x3, 0xb8, 0x2, 0x8, 0x4, 0x0, 0x6, 0xfffffff8, 0x1, 0x1ff, 0x1f, 0x2, 0xffff, 0x0, 0x3, 0x81, 0x4, 0xff, 0x7, 0x69dba992, 0x10001, 0x96, 0x61d, 0x4c82, 0x8, 0x2, 0x10001, 0x401, 0x7, 0x7, 0x0, 0x7, 0x7, 0x80000000, 0x4, 0x1, 0xab3, 0xa6, 0x80000000, 0x2, 0x1, 0x7, 0x10000, 0x1, 0x3d44, 0x69, 0x8, 0x3, 0x4, 0x1, 0x6, 0xffffffff, 0x0, 0x14e, 0x1f, 0x3, 0x10, 0x7fffffff, 0x0, 0x0, 0x20, 0x3, 0x0, 0x3, 0x3, 0x10000, 0x80000000, 0x5, 0x101, 0x96a, 0x8, 0x7, 0x3, 0x1, 0x7, 0x3, 0x8, 0x1, 0x40, 0x0, 0x9, 0x5, 0x9, 0x80000000, 0x6, 0x8a5, 0xffffffff, 0x3, 0x1f, 0x20, 0x1, 0xff, 0x80000001, 0x2, 0x7, 0x3, 0x8af, 0xe12, 0x80, 0x0, 0x80000001, 0x0, 0x7, 0x8fb8, 0xffffff80, 0x6, 0x3, 0x1, 0x7ff, 0x97, 0x0, 0x7, 0x3, 0x3, 0x1800, 0x10000, 0x7, 0xe6, 0x7, 0x0, 0x9fc, 0x3f, 0x14800, 0x6, 0x9, 0x7, 0x1, 0x9, 0x2, 0x3, 0x2, 0x40, 0x7, 0x80, 0x2, 0x7, 0x6, 0x100, 0x7, 0x7, 0x80000000, 0x200, 0x5, 0x401, 0x2, 0x7f, 0xdbad, 0x1, 0x4, 0x6, 0x82a, 0x7, 0x7, 0x63, 0x9, 0x10000, 0x0, 0xff, 0x2, 0x200, 0x10001, 0x381115ce, 0x8000, 0xffff, 0xab4d, 0x6, 0x8, 0x7, 0x8000000, 0x0, 0x81, 0x9, 0x5, 0x18eb12f0, 0x929, 0xfffffff8, 0x9, 0x1, 0x0, 0xca1, 0x4, 0x0, 0x6, 0x6, 0x6, 0x4, 0x46, 0x1, 0x6, 0x5, 0xfffff800, 0x400, 0x5, 0xfffffa4f, 0x81, 0x9, 0x6, 0x6, 0x10b7, 0x1b5671ad, 0x7fff, 0x7, 0x10001, 0xfffffffc, 0x9, 0x1, 0xffffffff, 0x10000, 0x6, 0x7, 0xfffff800, 0x3ff, 0x200, 0x6, 0x5, 0xdeb, 0x3, 0x1, 0x4, 0x0, 0x6, 0x81b, 0x6, 0x3f, 0x4485, 0x1f, 0x95a, 0x1, 0x1ff, 0x80, 0x8, 0x2, 0x81, 0xffff1dbd, 0x9, 0x101, 0xffffffff, 0x4, 0x3, 0x0, 0xec, 0xffff8add, 0x506, 0x200, 0xff, 0x3, 0x20, 0x6, 0x8, 0x5, 0x4, 0x80, 0x1000, 0x3f, 0x20, 0xc5, 0xffff, 0xebd, 0xffff, 0x20, 0x3, 0x8, 0x5, 0x19, 0x5, 0xfc8, 0x10001, 0xff, 0x3f, 0x7, 0xf54c, 0xfffffffc, 0x7, 0x89, 0xfffffff8, 0x1000000, 0x7, 0xb9, 0x2, 0x8, 0x40, 0x5, 0x7, 0x10001, 0xf5c, 0x4, 0x5, 0x4, 0x7f, 0xffffffff, 0x81, 0x80000000, 0x97a, 0xffffff80, 0xfffffffc, 0x0, 0x5, 0x800, 0xffff658c, 0x7fff, 0x9, 0xce08, 0x2, 0x1, 0x5, 0x9, 0x4, 0x3ff, 0xfffffff7, 0x9, 0x20, 0x1, 0x10001, 0xfffff2a4, 0x101, 0xbb20, 0x20, 0x401, 0x8, 0x80000000, 0x7, 0x80000001, 0x4, 0x8, 0x7fff, 0x4, 0x512d, 0xfffffffb, 0x7fff, 0x80000001, 0xf8d, 0x1, 0x2, 0x8000, 0x400, 0x9, 0x1, 0x7, 0x2, 0x80000001, 0x0, 0x5, 0xffffffc0, 0x10000, 0x9, 0x0, 0x8001, 0x7, 0x4, 0x4, 0x5f, 0x4, 0x7f, 0x9, 0xf5, 0x6, 0x4, 0x3, 0x1f, 0x3, 0x8000, 0x7, 0xff, 0x101, 0x1, 0x5822, 0xbe8c, 0xac, 0x3, 0x1ff, 0x9, 0x40, 0x1, 0xb1a3, 0x4, 0x6, 0xd0, 0xffff, 0x0, 0x0, 0x1, 0x8000, 0x80, 0x4385, 0x9, 0x3, 0x3, 0x1, 0x80000001, 0x1, 0xff, 0x2, 0x8001, 0x9, 0x1f, 0xfff0, 0x9, 0x0, 0x5, 0x9f8, 0x40, 0x4, 0x2, 0xc5a6, 0x20, 0xffff0000, 0x5, 0xfc, 0xffffffff, 0x80, 0x6, 0x0, 0x0, 0x5, 0x0, 0x40, 0x8, 0x8001, 0x9, 0x30, 0x401, 0x6, 0x433, 0x0, 0x8e7, 0x7, 0x5, 0xfff, 0xffffff81, 0x7, 0x9, 0xffff, 0x400, 0x6, 0x4e0, 0x9, 0x8a, 0x0, 0x3, 0x7, 0x7, 0x4, 0x200, 0x6, 0x80000001, 0x3f, 0x7fffffff, 0xffff0000, 0x3, 0x3, 0x5, 0x80000001, 0x1, 0x8, 0xfc000000, 0x7, 0x4, 0x623, 0x4, 0x2, 0x957a, 0x3f, 0x0, 0xb, 0x80000000, 0xaf, 0x3ff, 0x80, 0x4, 0x20, 0x9a5, 0x4, 0x943, 0x10001, 0x8, 0x8, 0x3, 0xa8, 0x8, 0x0, 0x4655a61f, 0x2, 0x841, 0x0, 0xffffffff, 0xffff, 0x7, 0x1, 0xff, 0x4, 0x50d, 0x2, 0x1000, 0x9, 0x5, 0x3, 0x7, 0x1, 0xb9a, 0x9, 0xae87, 0x3f, 0xfffffff9, 0x8, 0x100000, 0xfff, 0x8ca4, 0x9, 0x4, 0x200, 0x3a, 0xfffffffc, 0x9, 0x6, 0x6, 0x4, 0xc85, 0x800, 0x4, 0xfff, 0x84d6, 0x7f, 0x3, 0x7, 0x67, 0x9, 0xfffffffd, 0x6, 0x3f, 0x10001, 0x8, 0xf1f, 0x4, 0x2, 0xfffffc01, 0x1ff, 0x3a, 0x4, 0x9, 0xffffffff, 0x0, 0x1, 0x0, 0x4, 0x2000, 0x6, 0x70000, 0x2, 0x4, 0x0, 0xc6a4, 0xfffffffd, 0x8fa, 0x903, 0xabd, 0x1000, 0xfff, 0x3, 0xfffff43c], 0x1, 0x400, 0x800, 0x9}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)={0x2, ',\n'}, 0x3) 23:20:19 executing program 0: socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, &(0x7f0000000000)=""/119) 23:20:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f0000000040)=0x49, 0x4) [ 3208.322402] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:20:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000005007d"], 0x2c}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 23:20:19 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000000)=0x4) 23:20:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0700000011007d"], 0x2c}}, 0x0) 23:20:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = accept(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @empty}, &(0x7f0000000080)=0x80) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x100}, 0xc) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x6410) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000100)=0x1000) 23:20:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x20, 0x7, 0x9, 0x1, {{0x18, 0x4, 0x0, 0x3, 0x60, 0x67, 0x0, 0x20, 0x0, 0x0, @multicast2, @multicast1, {[@end, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0xc3, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @multicast2]}, @cipso={0x86, 0x34, 0xffffffffffffffff, [{0x1, 0x2}, {0x1, 0x8, "9693140ba8c4"}, {0x2, 0x2}, {0x1, 0xe, "4dce8c110e01e3f676414615"}, {0x7, 0xf, "83fb2a9ad6f89e8f819b3e1713"}, {0x0, 0x5, "268df4"}]}]}}}}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x6, 0x1b, 0x7e, 0x48, 0x80, 0x8, 0x5, 0x0, 0x71, 0x9, 0x9, 0x6, 0x11, 0x80, 0xe3, 0x2}}) 23:20:19 executing program 4: sendto$llc(0xffffffffffffffff, &(0x7f0000000040)="46f794db453e75419e6b2fd9cf2154c9d9572013d37346e5e2b7f7dd77d128d5e5b0f40b0b83afdb6399fc3c5439ee78c4140fbe543e4251cd8ea5e9", 0x3c, 0x20000000, &(0x7f0000000080)={0x1a, 0x10e, 0x4, 0x4, 0x9, 0x1, @remote}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}, 0x1, 0x0, 0x0, 0x4054}, 0x0) [ 3208.418451] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3208.445041] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 23:20:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2cedddff10007d"], 0x2c}}, 0x0) 23:20:19 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f0000000000)={0x2, 0xffff, @local}, 0x10) 23:20:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x240008d0}, 0x0) 23:20:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000500040039dced1500000000000000"], 0x1c}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newroute={0x6c, 0x18, 0x200, 0x70bd2b, 0x25dfdbfc, {0x2, 0x0, 0x20, 0x40, 0xfe, 0x0, 0xfe, 0x4}, [@RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010102}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x8, 0x2, '$(+\x00'}}}, @RTA_IIF={0x8}, @RTA_METRICS={0x21, 0x8, 0x0, 0x1, "0e3049c7eb70b00dfadb67daa5a5fa1fcad65823b398d426bee4cd6e4f"}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6, 0x6, 0x40}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40640c4}, 0x44000) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @local}, 0x10) 23:20:19 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$rds(0x15, 0x5, 0x0) connect$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) [ 3208.578419] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 23:20:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x4, 0xff, 0x0, 0x43, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x7, 0x0, 0x80000000}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) 23:20:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x2c}}, 0x26040056) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0xc0, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xc0}, 0x1, 0x0, 0x0, 0x10800}, 0x80) 23:20:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x38, r2, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010102}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000080) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2003, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) getsockopt$netlink(r4, 0x10e, 0x2, &(0x7f0000000280)=""/221, &(0x7f0000000100)=0xdd) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1700000011007d071ede4da10c8c09c27d441e151e92a6b5633d957c91c32f6dbd6112e626d69652b3e5e80145fbff0b6dc945501538fbdb7e747e582b98d1397dadff56365b9725231f675ad40317ab00f6eea3becf984f80366e22ffff5f4da4f59f57ce5bf957cb3c2c784128975c9b5228b1a232dd4e46276fe686339d3d36a696380700000057c8676b15ab950004000000000000261bca5f1053afcda6852b643ce6ce6fbcd2853a7cb9a2a38df8d09012679483039ed3cf34ccf5e9bff4c4d999dc043075224a50efe76f6c253ce8f8c20f79e11864d2b005588959c537cd069c3b5c556cd47181595793ce1eaf7e252a1d37ecc48bcfb050a696f4dfe651590012231998d8676bc2651b290aec560229b11b0e866479b62bb1621a236cdd37f81c1a3e2eab0d2582aa7881e1f42f61c001d89052635cb3c5e11b423237377ac5f425"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 23:20:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00e0085947c4617039594fdeeb6a000100000087497416312327acffff000019d92d0aa24c396811316482"], 0x2c}}, 0x0) 23:20:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000040)={0x4, 0x0, 0x1}) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x5, 0x5, 0x2, 0x80, 0x2, 0x1f, 0x1f, 0x62, 0x1, 0x5, 0x7, 0xd2, 0x1f, 0x5e, 0x0, 0x3}}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x9}) r3 = accept(r0, 0x0, &(0x7f0000000380)) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000003c0)=0x700000, 0x8) 23:20:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780c1e02212d6f3c509722fb63b600c4d"], 0x1c}}, 0x0) 23:20:19 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4, @remote}, 0x10) 23:20:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x0) 23:20:19 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0x0, 0x8001, 0x7}}}, 0x9) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000140)={@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0xde, @private0={0xfc, 0x0, '\x00', 0x1}, 0x101}}, {&(0x7f0000000080)=""/98, 0x62}, &(0x7f0000000100), 0x34}, 0xa0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 23:20:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@ipv4_deladdr={0x88, 0x15, 0x20, 0x70bd2b, 0x25dfdbfd, {0x2, 0x58, 0x10, 0xfe, r2}, [@IFA_LABEL={0x14, 0x3, 'hsr0\x00'}, @IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x41}}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010100}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0x7, 0x100}}, @IFA_LABEL={0x14, 0x3, 'nr0\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x8000, 0x0, 0x81, 0x9}}, @IFA_FLAGS={0x8, 0x8, 0x48}]}, 0x88}, 0x1, 0x0, 0x0, 0x44000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) 23:20:19 executing program 5: setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000000)=0x80, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) 23:20:19 executing program 0: ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000000)={0xa, 0x1, 0x545b, @remote, 'hsr0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) 23:20:19 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) socketpair(0x11, 0xa, 0xfffffff8, &(0x7f0000000000)={0xffffffffffffffff}) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) socketpair(0x8, 0x6, 0x40000000, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000140)={0x1, "cd"}, 0x2) 23:20:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) 23:20:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sysinfo(&(0x7f0000000180)=""/166) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)={0xa, 0x0, [{0x8, 0x4, 0x0, 0x0, @sint={0x101, 0x8}}, {0x7a, 0x0, 0x0, 0x0, @sint={0x7, 0xb27}}, {0x4, 0x0, 0x0, 0x0, @irqchip={0x0, 0x8001}}, {0x2, 0x1, 0x0, 0x0, @adapter={0x0, 0x80, 0x5, 0x3ff, 0x80000000}}, {0x5, 0x3, 0x0, 0x0, @msi={0xfff, 0x10000, 0x1000, 0x1f}}, {0x55d, 0x3, 0x0, 0x0, @adapter={0x1, 0x10000, 0x0, 0x10001, 0x10000}}, {0x3, 0x1, 0x0, 0x0, @adapter={0x7, 0x3ba, 0x5, 0x7f, 0x2}}, {0x8000, 0x4, 0x0, 0x0, @irqchip={0x1ff, 0x2}}, {0x4, 0x4, 0x0, 0x0, @msi={0x5, 0x3, 0x1}}, {0x2, 0x2, 0x0, 0x0, @irqchip={0x38, 0x73c}}]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00006da7e1a7f500596dab66c940a09b8cae9f6bc95cc9c62081cd6f3cac47d178803428e8151a2bf63cd0c3fbc554e9a2e2b9030c3b9f9266e7a1d54104774f0a131f72d62253ea83", @ANYRESHEX], 0x2c}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 23:20:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x2c}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x80, 0x101, 0x1ff, 0xfffffffc, {{0x12, 0x4, 0x0, 0xc, 0x48, 0x65, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@ssrr={0x89, 0xf, 0x36, [@local, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback]}, @timestamp_addr={0x44, 0x24, 0x70, 0x1, 0x1, [{@remote, 0xaee}, {@broadcast, 0x2}, {@broadcast, 0xfff}, {@broadcast, 0x8}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', r2, 0x7800, 0x700, 0x0, 0x101, {{0x30, 0x4, 0x1, 0x9, 0xc0, 0x65, 0x0, 0x9c, 0x4, 0x0, @remote, @multicast1, {[@generic={0x88, 0xd, "d3be69da176696d7d656bc"}, @timestamp_prespec={0x44, 0x54, 0xe2, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xec5c}, {@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x6}, {@empty, 0x59}, {@dev, 0xfffffffc}, {@remote, 0x3}, {@multicast1, 0xfffffa2b}, {@loopback, 0x7}, {@broadcast, 0x1}, {@broadcast, 0xd8e4}]}, @ssrr={0x89, 0x1b, 0xd7, [@rand_addr=0x64010101, @broadcast, @broadcast, @multicast1, @multicast1, @rand_addr=0x64010102]}, @ssrr={0x89, 0x13, 0x53, [@broadcast, @remote, @broadcast, @local]}, @rr={0x7, 0x7, 0xab, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @timestamp_addr={0x44, 0xc, 0xd0, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc6}]}, @rr={0x7, 0x7, 0x4f, [@private=0xa010102]}]}}}}}) 23:20:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f7809299e29c0467ef591c18eba6f208e3aeb7f051cdb5e8858d92af94bb32780bfa603b018107bde9fa24654adb88a030ac46287d178058f575dc081617940a1f09af96c466db516320ebcc006ca088b8f9bd57185244dee4961fe9d78735c6c5dcc47777595615b0ecec1909856942e0dd7aeda8db6f8a92f2abbb41a4d911bddc5a4f26c22d914d2fa38117ae977c75a181a3f452c30792aac4e1dc0e01db16336b18b17efcf9cb5fcbbda1b0f81c1e9651800e7ce64e8bfd0c1cb8e2d38d6ee29ea0ae75c2dc0ce87865cbd2a43a9368"], 0x1c}}, 0x0) 23:20:19 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000100)=""/236) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x20048801}, 0x81) 23:20:20 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) 23:20:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[], 0x1c}}, 0x0) 23:20:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x408, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x33}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xcb8}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x65178b7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6ac}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4ba9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x682}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}]}, @TIPC_NLA_SOCK={0xb0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa31}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdd9d}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdcb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb71e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "816cdd157df2bf63678221544da943c5bc79d9ad445e5ddd9a24378a85f9"}}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x8040}, 0x48811) 23:20:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0xe8, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe9}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa70}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x621}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x6) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc014}, 0x40) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x63}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x4000014) 23:20:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x8000, 0x8, 0x3, 0x8, {{0x15, 0x4, 0x2, 0x33, 0x54, 0x67, 0x0, 0x7b, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast, {[@cipso={0x86, 0x3b, 0x2, [{0x7, 0xe, "d1669bd081cfd2bac27e8b1a"}, {0x2, 0xe, "5f3ac0034db55c00c798bdf5"}, {0x2, 0x8, "2aaa66b77f60"}, {0x7, 0x11, "ea824e0c0fbeef6f9decdb08e269d5"}]}, @noop, @noop]}}}}}) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f00000001c0)="67670f60ed650f0054410f90ff0f21bd66b9b902000066b80500000066ba000000000f30b82f000f00d00f01b275a50ae3643bc40fc77f11", 0x38}], 0x1, 0x38, &(0x7f0000000240)=[@flags={0x3, 0x100280}], 0x1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000180)=0x90000) 23:20:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x2c}}, 0x0) 23:20:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0xfffffffffffffe01, 0x305801) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000080)={{@my=0x1, 0x2}, 0x1, 0x1, 0x6a}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 23:20:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x1c}}, 0x4000001) 23:20:20 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r2 = syz_open_dev$audion(&(0x7f0000000200), 0xa4b7, 0x400) connect$rds(r2, &(0x7f0000000240)={0x2, 0x4e24, @remote}, 0x10) r3 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x10001) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB="cf39d6bd58b00d7d9ddc688000"], 0x1) 23:20:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="76278fa08a46b67afa4b3608758dd3c814faea931a65903545af135ba6bdb42726735a0fdf8313b01b1382537a64ae44df9a", @ANYRESHEX], 0x2c}}, 0x0) 23:20:20 executing program 2: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) socketpair(0x1f, 0xa, 0x6, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$rds(r0, &(0x7f0000000100)={0x2, 0x4e20, @private=0xa010101}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\t\x00\x00\x00\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) 23:20:20 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) 23:20:20 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x2001) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000080)={{&(0x7f0000000100)=""/63, 0x3f}, &(0x7f0000000000), 0x5e}, 0x20) 23:20:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011f8ea"], 0x2c}}, 0x0) 23:20:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000ee0f007d9444aee9f1d7c1347b27aae30432f5805a843cbf6bd56e0601fa86d06aa800100a12505627c5629f3a8308c1a21c8b10575a967990ebdae0a963f7b5df68d5cb317834be372542f68ac99200c3a1c1d72d2d617cc9ee5b9121ca866ff82b24842de28cb8968e2ae5075f10caea8c90575912"], 0x2c}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x7fffffff, 0x200) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@buf={0x16, &(0x7f0000000040)="353ccc50e1c3bd4aade688906885011092257c41fada"}) 23:20:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) 23:20:20 executing program 2: socket$nl_route(0x10, 0x3, 0x0) 23:20:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000080)={0x7fff, 0x3}) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000100)={r3, 0xb8, 0x4, "026f03c92b04c6d8d8f08aaf70d960366b87825bfb421cec128189c434b8e89cede382ca09e29824e17d88dd22e85596ee4a4aae90eb523a27f8b074e855f8f021500bf7337e55416ca22424d5c491e93fecdd2a81120e4953e6226d7ba5c8"}) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xc) 23:20:20 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = accept(r0, 0x0, &(0x7f0000000000)) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x5) 23:20:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x1c}}, 0x10) 23:20:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x28, r1, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="90020000", @ANYRES16=r3, @ANYBLOB="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"], 0x290}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00fdffffff7d"], 0x2c}}, 0x0) 23:20:20 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x2c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x44045) 23:20:20 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x5, 0xac, 0x9, 0x1}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1700000011007d", @ANYRES32=r1], 0x2c}}, 0x0) 23:20:20 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 23:20:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x11, 0x3, 0x80, 0x3, 0x1fdc, 0x1, 0x3, '\x00', 0x0, r2, 0x5, 0x2, 0x1}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB="def94333d898142e1d59d7ca64fae92cee77faf43402c8"], 0x1c}, 0x1, 0x0, 0x0, 0x12}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4080}, 0x4840) 23:20:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000900007d08a3"], 0x2c}}, 0x0) r1 = accept(r0, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000100)=0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x700, 0x7847, 0x2, 0x4, {{0x7, 0x4, 0x2, 0x0, 0x1c, 0x64, 0x0, 0x3, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x82, 0x6, "85d2967e"}, @end]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)=@can_delroute={0x2b4, 0x19, 0x1, 0x70bd2a, 0x25dfdbfe, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_LIM_HOPS={0x5, 0xd, 0x82}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "9a978a01ffbf659f"}, 0x7}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff9, 0x0, 0x8, 0xff}}, @CGW_CS_CRC8={0x11e, 0x6, {0x5d, 0x79, 0x62, 0x1f, 0x3, "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", 0x0, "1581a7399c16709af0b028128a78187d513449fb"}}, @CGW_CS_CRC8={0x11e, 0x6, {0x63, 0x30, 0x29, 0x1, 0x5, "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", 0x2, "b1a85009ba1d1cfd94980641beeeff859af8c331"}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x0, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "0435f927227b703c"}, 0x2}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x1, 0x3, 0x0, 0x0, "14497020ef7f5021"}, 0x6}}]}, 0x2b4}}, 0x20004000) 23:20:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000024c0)={'syztnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x6, 0x20, 0x81, 0x3, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x7, 0x20, 0x3, 0x8}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x0) 23:20:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="35f2ffff10213e35ae067d", @ANYRESHEX], 0x2c}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:20:20 executing program 1: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x3b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000014) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 23:20:20 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="070000000008463c164ebf9c8dd4f7d89ab6eb305bfa21143df52356258aa7779ddb20e54745a728e1c77c43d38f5fe72e3894d0bda84b55b9d9e0f55080356c66d96080f534868ac4cd1b4ada174dd61156d57c418872055cce3e3fb4a0f3b441bd4b65727c89c3e2708c21ab2d55a9fcf3ea177792d6c6175d353935cbfaef1f5280863f254512658a2375144b8264976503b50b26258b19cff48066abe13aa574685e2c07ed63df87d172572156f1f3b6ce15795286a47ad39997656840bfa82224070a8e3cdff5bbcabea305059e89a941bb09dc4d74c22e27d9724e4c6df2"]) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 23:20:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) getpeername$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) 23:20:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x28}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="7f7af5eadf44bd5fe0fc856974c19621412b7a358387ee06b154260072ac12cb4cb3a7ee6ddacdec6bce56fd05d3b64544e201e3a64aef0005a59eefab3c711fd7de26d09599dffdf9ac2b031ba0fdcdfc62588d44467c33eac27178f33109654ffdb3abcd336f71c0bfa1b5b4344c92ffb70e0fbe542e4865a5c9000000003bf90ddb7b8aa4b6e800e460fb87bcb4f688dd4238775224299b"], 0x2c}}, 0x0) 23:20:20 executing program 5: r0 = accept(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000080)=0x80) bind$isdn(r0, &(0x7f0000000200)={0x22, 0x3, 0x2, 0x3f, 0x7}, 0x6) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040), 0x4) socket$rds(0x15, 0x5, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 23:20:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000180), 0x5df, 0x20c581) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_newroute={0x24, 0x18, 0x2, 0x70bd2a, 0x25dfdbfd, {0x80, 0x10, 0x10, 0x38, 0xfd, 0x4, 0xfe, 0x0, 0x500}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="cb797f0f0c46da21dfa7a7d0192e2f1700c7240011007d"], 0x2c}}, 0x0) socketpair(0x18, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMCTRLREQ(r2, 0x80044945, &(0x7f0000000040)={0x800, 0x10000, 0xffffffff}) 23:20:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000010007dfbb0747aaaa2290cc3e029a4b5018c820e107c99e8b780dd85d2b6"], 0x2c}}, 0x0) 23:20:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="a34fa958be3b99e9515d27d20afe90f4893c0000000046ae341e1aee35006bdba56b426093821e37c9ece0ed448eccdbdce81e6f320500899fe7fc018f0e11694d1f4bce579b2f", @ANYRESHEX], 0x2c}}, 0x0) 23:20:20 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000140)={{@any, 0x1}, 0x9, 0x7, 0x40, 0x1}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1, 0x10001, 0x10}, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r2, 0x7cb, &(0x7f0000000100)={0x25, 0xfff, 0x8}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 23:20:20 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) socketpair(0x7, 0x1, 0x2, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000001140)={@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x1, 0x4, 0x7, {0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x401}}}, {&(0x7f0000001200)=""/4103, 0x1007}, &(0x7f0000001100), 0x4b}, 0x75) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) socketpair(0x2a, 0x80000, 0xfffffff7, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) geteuid() 23:20:20 executing program 2: socket$nl_route(0x10, 0x3, 0x0) 23:20:20 executing program 4: ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000000040)={0x1f, 0x7f, 0x9, 0x2, 0x7}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000080)={0x4000, 0x2000, 0x7, 0xe6d, 0xfffffffc}) 23:20:20 executing program 2: ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xffff, "6963d207f6b3b570033a5f2dd2fe3b9b4bfd38eb8007d4043f011ee2b91561d3593146c880af50bb6fb3d97f22ce8ffd129e4d4b1003b176d1ee0187c2ff0dfd61c901305ecd8b245c5cef9f216c42c2034f807604437d194ce964d21833206db2dc5cd33f32d09f2c8f0d7caa0d682d060ebc5f892b7d8a134abff6604ca81702c34dd836dc88ab"}) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000600)) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) bind$netlink(r0, &(0x7f0000000580)={0x10, 0x0, 0x25dfdbff, 0xc02000c}, 0xc) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3f}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x44}}, 0x4000004) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000380), 0x0, 0x400800) socketpair(0x9, 0x2, 0x8, &(0x7f00000005c0)) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x94, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2d}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xb}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2a}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) getsockname(r1, &(0x7f0000000000)=@ethernet={0x0, @random}, &(0x7f0000000080)=0x80) 23:20:20 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2f, 0x2c, 0x4, 0x5, 0x41, @private0, @private1, 0x700, 0xff1f, 0x6}}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="010000fbc93b45040a92d550a7"], 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1e3d}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004050) 23:20:20 executing program 0: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'gretap0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x20, 0x7816, 0x3f, 0x3, {{0x1b, 0x4, 0x1, 0x23, 0x6c, 0x65, 0x0, 0x7f, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x44}, {[@cipso={0x86, 0x3b, 0xffffffffffffffff, [{0x5, 0x4, "3a98"}, {0x3, 0xe, "ccf9d79810208a3848e7a8b8"}, {0x0, 0x11, "fd26dec15cba34e2332c8349856820"}, {0x1, 0x12, "65a3cbb13d402cc1c5ecc04b0331bdee"}]}, @timestamp_addr={0x44, 0xc, 0x6e, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff9}]}, @generic={0x44, 0xa, "9470620353a9de04"}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl0\x00', r0, 0x29, 0x7, 0x6, 0xffffffff, 0x20, @remote, @loopback, 0x20, 0x1, 0x3f, 0x3}}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x4, 0x4, 0x60, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8, 0x40, 0x9, 0x2}}) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000520000012cbd7000ffdbdf2502080003000020000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080005000300000008000100", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x14) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dccd0dd42cef67792eae"], 0x1c}}, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000240)="8a0a279ca97f2e8cb0b098fe8b3bd59b3a28781b82b3db648bac74f93cf818138c8e511897256820cc726656689f4e56082902b66cf6f61860b71a699f1fbb591bb283d70aab9f285d9d485a2d1f2d6163c674ba880d24e5822b41aba440f6adab5507f2f2c572519f2071d0845cfa38912bcb6c32e5eb643fef7b47df77a801f13ee939a0060c0758ba41a9895c735c84ed617d7bcfbcf022188f11adfdaaecb8f72ffb475ed697eb912be143cee97ac58ad6a9f4a51cf09735b00ee78ee19d95f64af34e96d8f9f2223090070f4748fe38858c", &(0x7f0000000080)=@tcp6=r4}, 0x20) 23:20:20 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) socket$l2tp(0x2, 0x2, 0x73) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f0000000000)={0x800, 0x0, 0x81, 0x101}) 23:20:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) r1 = accept(r0, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80) bind$isdn_base(r1, &(0x7f0000000100)={0x22, 0x1, 0x9, 0xff, 0x7}, 0x6) 23:20:21 executing program 0: sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x42c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x64dc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x2e, 0x3, "d59c4faa6aa0981fb43784ac567dfbf1c0153ad097739a0aa41286359f41cd1d6d9dbbb4fbf7acf24cf6"}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "502549c6da5fe3c1a98d06b0711a3723ee48d467d240e045d2e032"}}, @TIPC_NLA_NODE_ID={0x8b, 0x3, "5d529db78db069f148d64e2e30e6e47886b86932f58cb93710cd4dc8d12752fa54f472d81109069b56a2bccf613b1d19da3adb6df1a277545d7b40654cd3a2512a5d5d781e200588c8b96f80df5d164f97ed0fc18a465e39c3a0c414cad573840d899da61fb17bc8c3d316ebca66d4457ee40bd9cc9f819ea4daf26821c282aeb03ad04cb585e2"}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x66e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xad}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcf9a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff78}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3782}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}]}, 0x42c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004044) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x48000000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[], 0x1c}}, 0x4000080) 23:20:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) bind$netlink(r0, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) getsockname(r1, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000100)=0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x80, 0x20, 0x7fffffff, 0x6bef, {{0x14, 0x4, 0x0, 0x3a, 0x50, 0x65, 0x0, 0x1f, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x3c, 0xee, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@loopback, 0x8}, {@broadcast}, {@rand_addr=0x64010102, 0x6}, {@empty, 0x2ded}, {@multicast2, 0x2}]}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0xac, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="00220000007dc7ce5b475008", @ANYRES32=0x0, @ANYBLOB="002000407fffffff000001014d01007400660000136790780000000064010101891be9ac141415ac1414aaac1414bbe000000200000000e000000144240221ac1414bb00000002e0000002fffffff8ffffffff00000005e00000020000000300831f190a010101e00000010a0101010a010102ac14142fe0000002e000000200"]}) 23:20:21 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = accept(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x80) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000780)=0x2, 0x4) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000240), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000000a4d5b5b9b0789ab16daeeb18bc3dedb0606f50c8c4bf33994735628aff16c3e8e19291c8f14862b0efd9ad38554839a0ae50124b72c18d33577cdbb89927714b8a4c5575572a52f168315aaeee7140abf91796e17411674f66593b1d5b05eff6f62751da7b7eacc0553e8de09", @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf250100000006000300ff01000008000a00020000000c00160001000000000000000c001600ff0100000000000008000b000200000006001d0004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x4000080) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) socketpair(0x10, 0x800, 0x8000, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) syz_open_dev$audion(&(0x7f00000007c0), 0x0, 0x40680) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r1) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b1000008", @ANYRES16=r5, @ANYBLOB="00032cbd7000fedbdf25140000003c0003800800010004000000080003000800000008000100d792000008000200ff070000080001000100000008000300feffffff080002008000000058000180080003007e070000080003000000000044000280080001000c000000080003000600000008000300030000000800020006000000080001001a0000000800030005000000080002000100000008000400f8ffffff"], 0xa8}, 0x1, 0x0, 0x0, 0x81}, 0x8008084) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000540)={0x1, 0x0, @pic={0x0, 0x3, 0x0, 0x3, 0x9, 0x0, 0x40, 0x6, 0x7, 0x1, 0x86, 0xc8, 0x6, 0x7f, 0xff, 0x2}}) 23:20:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x10200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x8000000000000000) 23:20:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept(r0, &(0x7f0000000000)=@ethernet={0x0, @link_local}, &(0x7f0000000080)=0x80) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000380)={@l2={0x1f, 0xfffe, @none, 0x9, 0x1}, {&(0x7f0000000180)=""/219, 0xdb}, &(0x7f0000000100), 0x5a}, 0xa0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x0) 23:20:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2ce83e7d000000000000"], 0x2c}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 23:20:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x68, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xff8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x1, 0x8, 0x672e, 0xffffffe1, {{0x9, 0x4, 0x0, 0x8, 0x24, 0x65, 0x0, 0x17, 0x0, 0x0, @empty, @empty, {[@generic={0x7, 0xe, "ef6eb93b9e46d515b4e3d086"}]}}}}}) 23:20:21 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x20, @private=0xa010101}, 0x10) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, @rc={0x1f, @none, 0x4}, @hci={0x1f, 0x1, 0x3}, @l2tp={0x2, 0x0, @local, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='gre0\x00', 0x0, 0x658, 0xfff}) 23:20:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000fb3a2d01f5197484a0c37baeafd3bf9e00170039dc15083d8a864d84f7801227f9b1485b9a15f2a94b480d0eb0e87244d4bda6b7cd26813ea3c1c7ffffffff3ca78624"], 0x1c}}, 0x0) 23:20:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000180)={@l2tp={0x2, 0x0, @broadcast, 0x3}, {&(0x7f0000000000)=""/189, 0xbd}, &(0x7f0000000100), 0x4}, 0xa0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x2c}}, 0x0) 23:20:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x4080) 23:20:21 executing program 5: sendto$llc(0xffffffffffffffff, &(0x7f0000000080)="77051da02f2a81225a4da0e15afd6e8b4038b9f0", 0x14, 0x41, &(0x7f00000000c0)={0x1a, 0x323, 0xf8, 0x4, 0x2, 0x0, @local}, 0x10) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = socket$isdn(0x22, 0x3, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 23:20:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000020003bdc15cbfd4d864d84f780cda99d090d17e7460fe06f62dad9b03b511574e2e3347e73a36f2c6b8de556e10c36af55a9d3f0191fc3169a3941b979176b7c81c308f9cdf616132b8d2549c90937a76b4ab7626beb81d4a7b5064c8c0d78e1818c55eca344dc052cdc006473"], 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000200)=0xa0000) socketpair(0x2b, 0x4, 0x400, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000100)={&(0x7f00000001c0), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x800, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4005804}, 0x48000) 23:20:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00934f4819010eefe378228c403dd182479cf400000200200000000ed06d24b9aa9f1455c879f0b665e8e991cfd9f27cb984e4409860aa058c3297b0316547bf5c62d3c860e51aa319eba41e7dd611371ddac349a5"], 0x2c}}, 0x0) 23:20:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1700000011007d4fd3042ea3c97e03e35011ebe83955879d1e49b731eff720673d3dd75fe46b0ba6bfea3a53867565fd0000000000000088d46e6650a60029b39c78cfe61de3d99134090073fbc4abe9ee4c6c74dfc0cbc5c2245671a1f0941acd62a6df9025a45521ce01ced836b4a73c647819d8fde348a6661759e08d4848638f4b28995f2e87abd08e9dc29ef50baa0c627b9dd2a6be72f19526fb4068a4de87fc751d7ef325be"], 0x2c}}, 0x0) 23:20:21 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0xfffffffffffffc00, 0x180) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x374, r1, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_BEARER={0x154, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffffb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @loopback, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x74a0}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x69}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "80556233e4b5cdebdc393aad1a507b7db15cb56e6f6747aabf03"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd2}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf18c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffafa4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xc58, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}]}, 0x374}, 0x1, 0x0, 0x0, 0x4000000}, 0x9177b23a74726bf0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x62, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX=r4], 0x2c}}, 0x0) 23:20:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) 23:20:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000003a0039dc15cbfd4d864d84f7809f3f4fe77d28f6defc555bb84b21e85e1195dddcf3ae25423435dc77be81c0de775aa72fff10aca07f73657700"], 0x1c}}, 0x8014) 23:20:21 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x1, 0x434800) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000040)={0xffff8001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x0) 23:20:21 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) socketpair(0x29, 0x80e, 0x395, &(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)={0x4, 0x5000}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000100)={0x3, 0x0, 0x3, 0x402}) r4 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$rds(r4, &(0x7f0000000000)={0x2, 0x8, @dev={0xac, 0x14, 0x14, 0x36}}, 0xfcbb) 23:20:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESHEX], 0x2c}}, 0x0) 23:20:21 executing program 3: setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000180)={@sco, {&(0x7f0000000000)=""/173, 0xad}, &(0x7f0000000100), 0x2}, 0xa0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 23:20:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 23:20:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) 23:20:21 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) connect$rds(r1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 23:20:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000040)) 23:20:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3802ba00bf16ca4a124d4e6c49101e76dffc3ac79ec7046a863cf66d298b58c0bd9ba0034d9e8285dbd245fd40231becdc4de60004f84252a9f2f5ee48b6112c115acc4b748455bbeb3b5ad06990482858a233822b5f4650802d4ea61ccf661db98e47307843783cd80430654f", @ANYRES16=0x0, @ANYBLOB="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"], 0x238}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) inotify_rm_watch(0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24004051}, 0x4000800) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[], 0x1c}}, 0x4008016) 23:20:21 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x338, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3d}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x89, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe729}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x30e8000}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x517}]}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_MEDIA={0x108, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1026}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1e0c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @private1, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010100}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x100}, 0x8000) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000080)={{&(0x7f0000000100)=""/114, 0x72}, &(0x7f0000000000), 0x1}, 0x20) socket$isdn_base(0x22, 0x3, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) 23:20:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x1) 23:20:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x80000) 23:20:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$isdn(0x22, 0x3, 0x4) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) 23:20:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x8, 0x0, [{0x4, 0x4, 0x0, 0x0, @sint={0x9, 0x9}}, {0x4, 0x1, 0x0, 0x0, @adapter={0x0, 0x8, 0x7f, 0x400, 0x2}}, {0x800, 0x3, 0x0, 0x0, @sint={0x9, 0x8}}, {0x7f, 0x3, 0x0, 0x0, @msi={0x7, 0x7, 0x400, 0x9}}, {0x0, 0x3, 0x0, 0x0, @sint={0x7f, 0x17326544}}, {0x9, 0x4, 0x0, 0x0, @irqchip={0x0, 0x6669}}, {0x3, 0x1, 0x0, 0x0, @adapter={0x8, 0x2, 0xe3a0, 0x4, 0x7fffffff}}, {0x400, 0x1, 0x0, 0x0, @irqchip={0x7, 0x1}}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x2f60) 23:20:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000300)=@req={0x28, &(0x7f00000002c0)={'dummy0\x00', @ifru_settings={0x0, 0x0, @te1=&(0x7f0000000240)={0x7, 0x1, 0x3, 0x7}}}}) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x54, r2, 0x8, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 23:20:21 executing program 0: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x2c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) 23:20:21 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000280)={0x2, 0x4e22, @local}, 0x10) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000), 0x4) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@get={0xe8, 0x13, 0x400, 0x70bd2c, 0x25dfdbfb, {{'cbc-aes-neonbs\x00'}, '\x00', '\x00', 0x2000}, [{0x8, 0x1, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) 23:20:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000cde0f007d"], 0x2c}}, 0x0) 23:20:21 executing program 2: socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000040)=0x9c06, 0x8) r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) 23:20:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x40880) 23:20:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000000)=0x2) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864db30580"], 0x1c}}, 0x0) 23:20:21 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000000), 0xfffffffffffffffa, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000080)={&(0x7f0000000100)={{@host, 0x25}, {@any, 0x5}, 0x400, "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"}, 0x418, 0x3}) 23:20:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000000)={0x101, 0x0, 0x8, 0x3}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0xb387) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 23:20:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000110010e1b22c4f08223141fec1bdb8d7cd5c3ba37a1de603c1b65f09cdf910ef00e5c3cb1dec25aa9e81e39e74a2b13d9b31e9c811db0c904048976e57d3fe4771eaab45118713986028045235dd1689840a25a50cfae96714ed47faa1d33c91f25c18c6eeb67b67be0f7e0240f3ce0566cee35ebc61e89e6e119fd3b334e7b05475225051ba7215f9138cfee2b234ac74688a1c366896a6338ab8c1e9c02c", @ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 23:20:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="bf183dc53cd47eaf258bb8b6d1fa749a67f16260f2757be2"], 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="4813e4429ecb5965939f12025698000008200000000800000006001d00"/38], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40004000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, r2, 0xa00, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = accept4$vsock_stream(r0, &(0x7f0000000540)={0x28, 0x0, 0x2710, @my=0x0}, 0x10, 0x80000) getsockname(r4, &(0x7f00000005c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, &(0x7f0000000640)=0x80) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}]}, 0x1c}}, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, r5, 0x372a8b622160413f, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xb4}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40048c1}, 0x40011) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r8, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x120, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xb}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x440}, 0x40841) sendmsg$TIPC_NL_KEY_FLUSH(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f90f5dc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x8) 23:20:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f0170000001100d1e38999ef3ece1906f6bae5383d8b52157ff76d98477ee6d7250a45edcbc7424d5d248487401a3a6fc5c16731f29a6163ff21830c63b26bc386c2c35171e55852e2e0acba9bbbba882753dda2053e786d07ac58e48269891d12af64e109356f630937d27abff51e380527de4844beea8d599471cf0a8a880228524f0000000000000000b216009aacbc62601143fc4d713ee316ac515256"], 0x2c}}, 0x0) 23:20:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x3000, &(0x7f0000000000), 0x4, 0xffffffffffffffff, 0x2}) 23:20:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x48, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0xa}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x4, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x48}}, 0x20004000) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffeb9, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000040) 23:20:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x125c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8b73aa9}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f0}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb3c7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x746d51cb}]}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x10ec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1b}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xbd, 0x3, "23b8324c4bf3a5c0d332c738294654365e04277ff5feac0c9234699db22b4215a046f47bc74c7514c03809fe43cd74fca7aa514791185e1bb94fea61c388e5e863f62ca95dd37749a81cfd48009709d4e854d9c105f0bfc49328d2b91f87d1555260243eef1cf8dcde46f4dd8ad375c8b0697c57570f448e241b9dbd494b5f817a825c38815fe0010b76339c0027a78cdb5b78ef4e73687b8096be64cc88ef7d67974dc63059c103d6778ed396205902047095dedf5996c377"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}]}, 0x125c}, 0x1, 0x0, 0x0, 0x40810}, 0x48010) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) 23:20:21 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = syz_open_dev$audion(&(0x7f0000000100), 0x180, 0xe0002) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000000)={0x103000, 0x102000}) socketpair(0x29, 0x4, 0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000280)={{0x1802, 0x1ff0}, 0x24}, 0x10) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000240)={{&(0x7f0000000180)=""/77, 0x4d}, &(0x7f0000000200)}, 0x20) 23:20:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001010bd672b4e7f076c3a72bda50a8a3e57007d10f9993ba741a5528a5c83ba2db230014c4b873eca747c75963e4d9a8661237382df709025fc656433a3d374b7f643a0d87f5e585699a655"], 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) socketpair(0x2a, 0x1, 0x2, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$IMGETVERSION(r3, 0x80044942, &(0x7f0000000180)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0x16, 0x4) 23:20:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000f7ff7de4b5c2b9a61d1d7ac2434ab1376be1193485eb114600003fe6acd9d8bd4c8967e7ea74e824aa19c56a6870f23bef47361e87c9b31fa7fced644c8cd18ae5edd93bf0acb6173b20e3471ec8d825c09364a8cc203859", @ANYRESHEX], 0x2c}}, 0x0) 23:20:22 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f00000001c0)={0xfff, 0x26f, &(0x7f0000000040)="1864f869889253779db2addc1dc6b34406bdc2eef72c919fd481b6e011c2fe0ae585cd7d120f5bfec95b308bd55bccad32dd7fecdb18a439132a72dbbee3ab1f7a3a3cd87c8bf17c764cb77b1096dc7750e3f0a782ed4d8d3cedf9fd821aeeb683aa3be4bdb076b5dfeb6a40fbfe9bcadcb27d2a9e669c165109963ef74fdc121508dc72005cf1c4aecc3d60dcba8a57b91531aea9dfee9ba1ccf9a99930eb035be27a0c13a016d2c4431c4b21c6b07951c98feba8075ee8049f09f9be76a611bb6a333c8f52c8b21f7168a6922222cb5756f8d411cd15f5e12cc356c98b5c961e2ec803519c8649ebcf30709ab0544e6716ad3a03", &(0x7f0000000140)="6405e46286fab5d1470bdc9a79aea3c12f151825364c0a134329b1cfe39817f5c139e0fde38a85896bcc5508b79c1968b1c9a695ac8a4626d21c61ad096b001e9002376fc994339cd1bcbe55193e5ba372774f9aae41b36160df8b8b5d57cde977eff30690ce7463487d550d3b76d47242dad5df6ffd1a478c3682747164", 0xf5, 0x7e}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000000)={{@host, 0x40}, 0x6, 0x1, 0x8, 0x8}) 23:20:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000180)={0x0, 0x0, @ioapic}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) 23:20:22 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0x2c}, 0x1, 0x0, 0x0, 0x4004884}, 0x80) 23:20:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) 23:20:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getnexthop={0x4c, 0x6a, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_ID={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_ID={0x8, 0x1, 0x3}, @NHA_FDB={0x4}]}, 0x4c}}, 0x10) 23:20:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000300)={0x1}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000380)) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, [0x7f, 0x0, 0x3]}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$IMHOLD_L1(r5, 0x80044948, &(0x7f0000000340)=0x5) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fddbdf2514000000640007800c000300a0000000000000000800010001000080080001000400070000000c000300040000000000000008000200faffffff0c000400ffff0000000000000800010028d200000c0003005200"/114], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="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"], 0x1388}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) 23:20:22 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x9, 0x8, 0x2c, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x40, 0x1, 0x7}}) r1 = socket$rds(0x15, 0x5, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r0, 0x4, 0x4, 0xf9, 0x8000, 0x35, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x80, 0x800, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000240)={'gre0\x00', r3, 0x728, 0x700, 0x7fff, 0xdb, {{0x17, 0x4, 0x1, 0x2d, 0x5c, 0x67, 0x0, 0x8, 0x4, 0x0, @empty, @broadcast, {[@rr={0x7, 0x1b, 0x56, [@dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @empty, @remote, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0xb, [{@loopback, 0x9}, {@private=0xa010101, 0xfff}]}, @timestamp={0x44, 0x18, 0xfd, 0x0, 0x6, [0xfffffff9, 0x800, 0x5, 0x80000000, 0x200]}]}}}}}) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000080)=""/8) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 23:20:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="77fe3400000010007d"], 0x2c}}, 0x0) 23:20:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="007df758762a3e1987c2a8dde842351f00000000000000a002a5a21209cd22d41c9757", @ANYRESHEX], 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 23:20:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3bb0a6ed1ac4c0321b28a1c377c1adb0dc344b2d4fbe7acc2a377379d688dd8f73fe48443bffeb0b0ea7"], 0x2c}}, 0x0) 23:20:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x40, 0x700, 0x4, 0x1, {{0x27, 0x4, 0x1, 0x9, 0xffffffffffffffde, 0x66, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3d}, {[@lsrr={0x83, 0x7, 0x9c, [@remote]}, @lsrr={0x83, 0xf, 0x51, [@local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x34, 0xa3, 0x1, 0x3, [{@remote, 0x9}, {@remote, 0x1}, {@multicast2, 0x6}, {@loopback, 0x7}, {@empty, 0x3}, {@remote, 0x7}]}, @cipso={0x86, 0x3e, 0x2, [{0x1, 0x6, "d915d209"}, {0x5, 0x12, "97130e31d979984152f61129cd441af6"}, {0x2, 0x6, "7ab6f86c"}, {0x7, 0x5, "df283a"}, {0x5, 0x7, "ff1be2c54e"}, {0x5, 0xe, "5a7ef5e1a73f940e107950fd"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000140)={'gre0\x00', r1, 0x10, 0x7800, 0x0, 0x0, {{0x29, 0x4, 0x3, 0xf, 0xa4, 0x66, 0x0, 0x47, 0x2f, 0x0, @rand_addr=0x64010102, @broadcast, {[@end, @lsrr={0x83, 0x3, 0x22}, @timestamp_addr={0x44, 0x4, 0x14, 0x1, 0x3}, @ssrr={0x89, 0xf, 0xe5, [@multicast1, @dev={0xac, 0x14, 0x14, 0x14}, @remote]}, @end, @noop, @timestamp_addr={0x44, 0x4c, 0xc5, 0x1, 0x4, [{@empty, 0x36d}, {@multicast2, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x400}, {@rand_addr=0x64010101, 0x39e0000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfff}, {@private=0xa010102, 0xa2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0x7}, {@broadcast, 0x6a}]}, @timestamp_addr={0x44, 0x14, 0xf7, 0x1, 0xb, [{@private=0xa010101, 0x7ff}, {@rand_addr=0x64010101, 0x80}]}, @end, @timestamp_prespec={0x44, 0x14, 0xcd, 0x3, 0xc, [{@broadcast, 0x5ccdd0fc}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) 23:20:22 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) 23:20:22 executing program 4: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f00000000c0)=0x18e1, 0xfffffffffffffdac) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f0000000140)) getsockopt$netlink(r2, 0x10e, 0x8, &(0x7f0000001380)=""/4096, &(0x7f0000000000)=0x1000) r4 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) syz_open_dev$audion(&(0x7f0000000100), 0x3, 0x80000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r5, 0x10c, 0x6, &(0x7f0000000080), 0x4) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400007909cfd9eb9a9cd676990050e41d6e86bfa0e8ffeeb1cee9", @ANYRES16=0x0, @ANYBLOB="0100000000000000000018000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x50, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_TYPE={0xffffffffffffff7a, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20048091) 23:20:22 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_deladdr={0x20, 0x15, 0x1, 0x70bd2c, 0x25dfdbfd, {0xa, 0x20, 0x8, 0xc8}, [@IFA_FLAGS={0x8, 0x8, 0x40}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040001}, 0x4040) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x2, 0x2, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x0) 23:20:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x5, 0x0, 0x44, @dev={0xfe, 0x80, '\x00', 0x22}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x20, 0x6d3, 0x1}}) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=@mpls_getroute={0x164, 0x1a, 0x402, 0x70bd27, 0x25dfdbfe, {0x1c, 0x14, 0x4, 0x0, 0xfc, 0x0, 0xfe, 0x8, 0x1a00}, [@RTA_VIA={0x14, 0x12, {0x4, "4a08aba83b3d4b16ef01dcf7705c"}}, @RTA_MULTIPATH={0x11, 0x9, {0x9, 0x12, 0x9}}, @RTA_NEWDST={0x84, 0x13, [{0x4, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7fff}, {0xffffa}, {0x3}, {0x20}, {0x8, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x1}, {0x7}, {0x1ff, 0x0, 0x1}, {0x6}, {0x20}, {0x401}, {0x8}, {0x84c}, {0xeb8b, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0xfff, 0x0, 0x1}, {0x20, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x8}, {0x3}, {0x3, 0x0, 0x1}, {0xffff7, 0x0, 0x1}, {0x7ff}, {0x6, 0x0, 0x1}, {0x399}, {0xff, 0x0, 0x1}, {0x3f, 0x0, 0x1}, {0x700}]}, @RTA_DST={0x0, 0x1, {0x7}}, @RTA_MULTIPATH={0xc, 0x9, {0x7e, 0x10, 0x1f, r1}}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x0, 0x4}}, @RTA_DST={0x8, 0x1, {0x719d}}]}, 0x164}, 0x1, 0x0, 0x0, 0x240c80a1}, 0x4001) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000180)=0x10001, 0x4) ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, &(0x7f0000000080)=""/48) 23:20:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESHEX=r2], 0x2c}}, 0x1) 23:20:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000016c0)={&(0x7f00000019c0)=ANY=[@ANYBLOB="8408000021b4ff1ed6bb473ef2f918a81e15717efc650d11f15e493c130493017290f146f8b0302b70cfb670e2cc", @ANYRES16=0x0, @ANYBLOB="000426bd7000ffdbdf2509000000280004802400078008000100200000000800010015000000080003000080000008000200020000001c000780080002000400000008000100010000000800020061ffffff2c000980080002000800000008000100ff070000080001000400000008000200040000000800020000000000"], 0x84}, 0x1, 0x0, 0x0, 0x14}, 0x8000) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x5}) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000001b80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001d80)={0x208, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x22, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x10}, @TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_ID={0x6f, 0x3, "e4f2329320ad786486aacbec365aa8cb9f385d1a57c2c4d7611b200d5c8f9c9160846beab86cf18aaa004a5d6b43f35783d76f6ba557210bccb850c3836f80f3ce27d58f40755b5d6a4c27a27e28b78e810e59bc89691ba7576726112bb334c41e7de40ade9a8db8f527de"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x135}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "c987e339cb6c9fbce77e608ef3195d2d772863b583746a465fb95464981d"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0xb0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2000000}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2cd1}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x800}, 0x4008881) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x3bc3e5fde40f4641}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x74, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffff80}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6d6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}]}, 0x74}}, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000001740)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001780)=0x10, 0x80000) sendto$llc(r3, &(0x7f00000017c0)="0dc0e3e63fa713c149d3073d5a224aa4ef2cdb63a964267e324331751a8135ba23290ee2e96224d5d3", 0x29, 0x8010, &(0x7f0000001800)={0x1a, 0x205, 0x20, 0x4, 0x5, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r4, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) clone(0x100, &(0x7f0000001c00)="c422b21513a1e281a7518c5cebce8137a1e3906ec19c572b3c9ca8903e19345072ee2a0f32d29c2bf69d5cd023d8063ba600a7f552a618d6ce49b619936ca5ec2d586e87dadeefeeba4b43543255d749fcb8307efe721a4b51a4fda3bc3827891750e7d49dcf45ab0b4d7dbafba42f3d2d7b1a7b20cf64966212e410d7b12b29514068c29a480c836bfaefb40c00c3ececffd572dc813817598de08e304c02391a6ade8e52234a72722a56", &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f0000001d40)="2aeffdb46829924cab358189d0a63a11054baf9fa4dce37271f87b84d389d5a2af171c9702e1586eaf906f6f") r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) bind$netlink(r5, &(0x7f0000001bc0)={0x10, 0x0, 0x25dfdbff, 0x10}, 0xc) sendmsg$rds(r4, &(0x7f0000001580)={&(0x7f0000000080)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000100)=""/240, 0xf0}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/252, 0xfc}, {&(0x7f0000000340)=""/187, 0xbb}, {&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x6, 0x0, 0x0, 0x800}, 0x10) 23:20:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$isdn(r2, &(0x7f0000000040)={0x22, 0x1f, 0x3f, 0x9, 0xa7}, 0x6) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1700000011007d", @ANYRESDEC, @ANYRESDEC=r1], 0x2c}}, 0x0) 23:20:22 executing program 0: socket$nl_route(0x10, 0x3, 0x0) socketpair(0x2c, 0xa, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1e, 0x2, 0x40, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x9, 0x354, 0x40, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x4, 0x7fff}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x890}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES16=r3], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10000000) 23:20:22 executing program 5: r0 = getpgrp(0x0) getpgid(r0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r2 = getpid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r2, 0x12) 23:20:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_ifreq(r1, 0x0, &(0x7f0000000080)={'ipvlan1\x00', @ifru_names}) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000040)={0x4, @local}) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f00000000c0)=0x101) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x2c}}, 0x0) 23:20:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000180)={0x3, 0x0, [{0x8, 0x1, 0x0, 0x0, @irqchip={0xffff243b, 0x4}}, {0x80000005, 0x1, 0x0, 0x0, @adapter={0x8, 0x90000001, 0xb73, 0x20000009, 0xfffffff9}}, {0x9, 0x3, 0x0, 0x0, @msi={0x0, 0x8, 0x7, 0x3}}]}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000100)={0x5, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}]}) 23:20:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x94}, 0x50) 23:20:22 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) connect$netlink(r1, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) getpeername$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 23:20:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x48, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x40080) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r1, 0x7aa, &(0x7f0000000200)={{@my=0x1, 0x1}, 0x8f95, 0xfffffffd}) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000001c0)={r2, 0x80000000, 0xf801}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) 23:20:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x1dc, 0x2) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f00000000c0)=0x20, 0x4) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0f54725935fda0882d4b9350e85f359db6abb", @ANYRES64], 0x1c}}, 0x74f5357de3294d4a) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000080)={0x40, 0x1000, 0x2c40}) 23:20:22 executing program 2: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x4c}}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="170000001100a781523d7d9f1e644eaaa6bf144a52c27e3493a912d43a7bfd985765356d0eb8d11d9b7233c55d41de7623fb199654e9585b058d080a0f28b3a8c333cc3948bf859db3a62adb6aea07156669d30d5e434cb14d44946caf474546a66f7ace52cf1f9cba75f4d1025b7ec6016fae66dc1fb48ed13967ab263c7a3a0c4d842c9b925e605c89"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x884) 23:20:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xc5}, @L2TP_ATTR_RECV_SEQ={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x6008004}, 0x10) socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1100000011007d011b585fc8fd2d3329eb1b8bae4c47757054f0e64269346328376133d318546e4f3bcacda7d248e67f1e4d1fdd541cb32ebfdf73a59402868318c25357e5dec6616dc15377c1fa00000000000000000f7e954eeb54784533c64fb027e773f4eb08386ba7f029f71904b9efec0df0", @ANYRESHEX], 0x2c}}, 0x0) 23:20:22 executing program 3: socket$nl_route(0x10, 0x3, 0x0) 23:20:22 executing program 5: ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x5000, &(0x7f0000000000), 0x8, 0xffffffffffffffff, 0x9}) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f00000001c0)="66b9aa03000066b81affffff66baffffffff0f30360f01cb260f7f6f00baf80c66b88f0c4e8466efbafc0cb049ee2e648295fbded30f20e06635080000000f22e00f20c06635020000000f22c00fb3a26a00dfd026640faf8e0c00", 0x5b}], 0x1, 0x4, &(0x7f0000000280), 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, &(0x7f0000000100)=""/170) 23:20:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) socketpair(0x10, 0x800, 0x4, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x12) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x2c}}, 0x240408c5) 23:20:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'veth0\x00', @ifru_mtu}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) 23:20:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r6, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="133fe8d6c7b5acf788bf9c14eda03244a03e7d4111f7c2a47511634b038916378708100ea11095e46f46ba92fe175dea354f04464d8bff4bce084f67b524b33fbe117a0778955d90ce05797d9933974ea1e4e1b51d3ebb4bab75bb82129b877c17282c80cd9807242ca6e33484f9cf07d6edf493b66830189b57deb4f9f873b6032afe5bc83f8706ddd6ab98f359c471b2337a69416027d9db66199696202e8612f5fce61b97a9d994ccd9519793b0f61f2b957273ac9ae56eb4d1b329edf888f925aff9c2d725b0cf7d6ed6ef640fe57e28d6822dc0be355631d767461a25aaa5ee0c7aa7a008ad17479b8708f78383ceb3a04e4e96f93fe485e7fee98437b5a2398a74e5d7a4102c16633f200bffe20a6a2f98c234803e1442b8a0034f8e1cf3ff8e635c00824fc42dd9f6d9054b4c66f02149468017e7f6ffac98eea651a2a7bf2132508df64d4980ec6ae1e560ef9c239e465f6fbe362a1a8caaa4d0e8ac55c481e914ed1990e93d97db154e57f37602acfd53a69303c6e9776b1e7dc5213f370c812b0a0378a194eae70fe91b485248b1bdd49fba89f38e650fcfd7fe1521b2ec3b748ef2410d1e1de824643f0b20515cb27369162caba60444f68171e040f4ec69ddfa33c6c2ba94ca278752ce83933e8023aae53ecbe493687dfc4f7bd86c263414cf3410c0dfc91d65175c3f7230d026b94b77de6efd3c4c476768673b851a0196870c08ffb925f3a66966fe20861cd5ef55298ee5a766aff109e66ba680b09fb229b282e93b62ea70ed953c2fca3dc753c05daad47af45275a487f736fe686d3633e87a8e5f03f846265df31d7476453df06548e04c602dfccffa742e84f966fc0c6746f6c62e7a4bd61489ead20592e0d7928ea24c899a642b85dffc87104e0de98b0249817b76827c68fb70447e590d2b56d181f1fb9f0cc329da5acc4f29523230898e6c0cff426726a0f902680a792fda9db7c9a03084ace156334dd12a4b7b8d42d38eda883dc68848ce3487a2d20d13ce1da06e8ec39b3e55f882ef06c0aab1c314777c86c2426e02ae52d667943ca90f76d9765f3d949e6e346e17ebbd62240cab474ed4e0f85e8792d0f88dad316d7abcd16d4ee19ef26023d07fdeac1505f80b537d551400ee65947d03dd5f715f09b4c0a3a90595983a2a3b45e5685c6d74f17002fc4af82755aad64db6032f73cc00765eec7d7edbff2da8e85b1ce101925e438c8138fcb104de5e1dbc9a7c4b7b89ae6632c9d9f3088978366293632656bc7b4362a0b078ecd01dd157ce24d18202f619691cd41e0fba9277cfe604789f526d5bdc856db3c6fdf813af9911685aa31b17b0cf2b137b647aec7cf792bfc3db4ea4b57edca05759e04a25d1de7e542b4bfaf80503e7c87fdab6b2add586b46207887e77dee4919ea93fc3a67a33a5517a874c5ec0578fb49a8d4af6877db72d94c29ac37c9fbec090218b54d48fcfb2af8c455551d99e7b7f3ad688e0f73035519b94d6336d76f36250a2899254d1dc9fbbfb52647bc7d2bbb117ad94811fe87dde08c162d50a6bfb62ff30df3adb722ebc4964b26063dac4d8e43e1038738626690556e37cfc85497ed8b1466fe739c5f37d8a1e6757858efed0e64cff34b7ec99d61f5e1622d2c63f8922f10efad1b0ceb80627a7afeb388a078bb69f60e106ee60907ac83c8330d7b4c04c4c58ecb29a58ac7fe1e24bf75e0fbc00585e21d1956287e3b5fe4e6a0dcc538a21621064e808e103bb9cdf692e580e5de0c8d5a6c27c756dfe580cfe34c3dd03a708a65ea79442a1b83e5eeed392f6d604c2115e79c9b4846050921da4077ad0243480cec44646a4d3d30c91bb6c06e216635e8d37ca0bde99a7d203210ce49caf14d1a3df5f30148865f9e268104c3a55684859267d3dc0662a19a823465456a3f8f95edd1b9d5fd1097982e61f6254ebe523c1039c42c23af334d3528615ac8af444f3754aa44844a0cc04272bedb73f7b3bb71a087d7984fcd5886c5d414555b3f55a959e6cb799415d18aba8e69066006ad3ad18b12e7d528638ef8e37fe839fd640f26cde6b7af5e56c8cf496c2dfab9c7833d3545d84bf4168b3f98c077be10d87045e3c7aeb3e7684cca0307ae1ddde54c789b95af08bb9b0c1fd7ce0dfe3beee10de51937db8ea84cd1ac856a3f976023b2c02f667b637719d6ca45e31a7de290e48f5c8ffc4ca7e999c993a93008224844322e6fc2cb356b68c4a853742af58863dcdf2a6198289b6cfe26a50121c5922563d14a6260f38a60e8b80dfa7e2cfa5843e944f1bc5a7f319cdd10dd18cbcf9a0983c1e919a9b0d3bf3f2249e95af0658ee1b61b6726ea9db670ddcc045e0884b7d11be37031da7b0bd41881c1af6b36c6cf94056b787a019f1c3653e31d363560041c2043cbf17db87216cd82f271d11cb119258175e1d2d9e6f7209c53f45494f5b68ff3e63443e3b05a919708ff6bdf1bcb50a4e3f3999468b3b33cea65e23bc529cbe05b60eef923f74b38dac0dceb16109dbc344b84cb41c40c1e9ad4ea05919d001e9c2388d6714ae90ab115ae7abe3d8b2ad96805a6dfcbd5279738b962cabc64e2fd84bec27ba9ca3646b2d6546dd83dc96e2aec5ea2b4d0ce871d4fbaacb4ab317b64d94d38973f770c3ee65f8f6530414e3cb9ce58f43f1065c9959089ee5e2386aae6de9f2068ea0510240456c102a225508141e0a55822bcc79123788c233ba947b8d771622ae64243fb8600676b71a6b2df3eb13aad1754174f02cd32459ffdacef47095bb5e9c0eee00b6d24b3c8722df793073068f9932c35fd40604c62b6ae533da2964b7fd3a8ae99193fc3404668e32f57a81e4d08a97743776b88a93ba9d7bdf9c3e308d6345cbda5693fad7b05ef57ff83fdf873ac5befd2eb38f13b2d3ef4b37bb1601dc192d0cd30eb56d76b7ce4f46bf4a08dfe4af4530a31a1b618f0c61e9decbd97dd2c71018e93cd2fb787b6708987af72cf4e7bf36693d8c58df2ba5c90e0cfbf950258f28843537e5d115ea7682e9f9aceff05b5fad8a75b2506ffb1637211a14a58f220862b060d10748a77df288b2249425264299c381d9e25299554c04dab1094705dda244bd70635ef8c8283e07867b7dcd062d86f0c17ab874cbbb8da11bc5b2857ceeea01f2f49bc67e67481a96af873cd463e5d7945ed36c55129c3ea08bb27a35bd7735d5454c40b7e9a997868608fa50cbff51ac174c747e979cdb83f7036d77cc701233d48e3e44da6f04f0ba460d9d5acfbaee8ce516ebd06e06a44c91d08f87cbee31e0715fbd4181564725698974d34d18b2b4f3d4f95f2fdaff9cd56cfa3af15954fbd6989c1cac7238a18f1aadd7eff2e1eb0bbadbbc252605faa648c9112c8244a49348e58af7ba4a99a93f5f296ef87073382999062efa54949bd433115a20f60cbd6bb968b194a5abd13ae8569288abbe2e02442157f4e089db02aa1e30a62f9ecc7ee7623575afadb4135091b9fb0a0436e76bbf9902f6eb7374200a4269bc5e6048b7bcc1e93b75ce506a5e2754af60de8ecc0c079a1dd6f5f34cff863adfa87ddec1d73d68b8b2c23a3d69770bb162bd6262654dced73ee60f7108e66b7fa002601f4f0ddd507424d692d1cb4be0284424faa2777ef2f0701858d9e1f29a68bd591d7b6aa1ca042097d455b235d364ba9ac3743fbce130b7fd86a9d8b3a6e5aa6e56dd30ba7173d34b2585cdacf6d0da72d6cda90fb7047ce5aea8ae9f50d66a03fabb4360ecc3f7d4fc5925df5534f0cb03fc8cd3d378a57c4d1597e4b03ec37fe9e30f0dde04d9cb774d2dbbb0036ea64984422f676dbcea2424298d012725379bbe1983e9c749126be7ab88855b43958df35d2ec5d53cdc9786c99fcc1fefad6a55b945f1e746d321aa80f5b92b59767fd8d7d68fca97d6b31bbff85cf7085b8155bf2b2f42fd378c10805f1d3242d22ac6b2ef72ffb89fdc8226e76f0f5b858ba16cd44a550ced3df8f9a7e63814cd1bacf028a302f9a1c57cd2bd3f7ceec28c43bd0d2d792d447c3db176516ed4126bb9b90a2c7d7f56544c8b877b1fa571846d0cc542e92b08c886fb84cbf35a2805f2b9b4b275e04b1895970181850e1e4d46d199cafe11193f7d629d2c36ec56d369c2e7ad7d93865bc74756c0c694ad0d8552d3f93d011a509b2d4a98a313bcdf19be0eaab470d30669a781b7869b0bc2f5f67ad0f68869c113170b790ce201f3c0e51e7e8f1012249869f02c19a3292084ada7c76f149c06057e3912054988b4984f0dda8dbb7ae57ccb7702779712df316d7d8160057f2d46a36bb78bfa4c7cd9499fb50a45a756bcb6b0fde9b129345f3b629d26120831967d31eca6f7c74524a363bfbeca2cf77f61b5054680cc8add962c9e72536400ecd1821e1d0bbbcf94dddbe3226c7a430278911fce4c96eaa92172bceeb7bcc0cc573cea388207d7d13ce40429f99d10aef27b24cd53797712d00928d74c731de3e0782ac5aa09c1c4c4c48a3a176af32170fd05e9900ad13d0a8decce1568dc0efd1bbb7b6158224c423404b03a88c4284fd42f4212699a0fd42f817e009558d4169d5191f972d86c05ad7f4cdc361170b368e2e30fddbd3721d1e175630c6b4a78bf251ce5a725ac58811f6deb62b19ee92f78d584326cc3a52d11b35932c712387b7a701de1972160d5ea3d4b2aa457d4a593ddc2950a955d3267fe1db18f01443c0b417f3e1d928e0137da03aa8efa354a50dc53611cfe6a954a0691ebd778751be15fbd00a561b425f63549077fbfe52d7926788c108ebf0d1de05af98ac46195c461a1775c9d999371748e943ee7b4c74c46be0da944a5863a101636950a56d8b3399b6e25683b730c227812efefa120f41988364c7ed2f23eb77f93a7a497c16bdafcfcc38b48370a6b246ab56796783b60ede5c52e12841d2fb8030fbfac1ac7896b175c54c386a562c9182bf0d6972360af46b9aa05d0ac90661cb4740ddf9ece3ae346801ece4e75fcbfd4b3a13985b9caf22d787f52be21883bfddfe882d38b92634b2ad250e28186609c6e93ef02167be0d78d9c30cc73a70c3ebb624db175dfb656f0b4dbc177114249f8f27156af6aa0c3cb3a56704c7609b00d34484f9a6407fa6b0c442205807668a2ef779378729c3113de3586fcb5764d232a9db87373f565592e75186288b0b541745e7f758bd6d798ff36ba847dbf2bbc18a06d430d04314ca76545043c0eb5f6bf5c1f3405264cbc94d9e5608678fec071c03dffd458cb2a59b514ab31c3952036b690b771e6a5e5fd0525c227e4360ca480b1bd68c4b7011316ae16ccc9b2013ad0e71a02e32a2c5dec5df2d6e6fc0c69005dcd69710b7d6e900ac3fa593d247113c92fd90b21510d0a9c64ded9ced1ce5cb4e711ec3f6fac8302f9aa4c644db418c5e5f52d731f5954cee217df34b20ce580fc88544cdd3b1b7da8a9b97df2234430c1539dee78c1965125847d8cc2b7178e3b568f4c1c4c59c45caf28a79a3cac1ed4ccd0cba0991df77c384889a01e6ae7b05909bd91e8c973d12759cd21c8bd7b7b097d8bc28c9573351317b2fa7e7f9fffb4a968659a3710be2f0cba6106687dc1a529039ce1f26cd6f013862a12a0bbdc35aa8700e18b0f2f670638e4eeebe6b68ce4e68a3777966ea4bc87f7b6fa18312fcd833e786f79b45766cbead4f1c66fcb11085d884d26c44c61d408daee098389284c66a0690ed604c5d69d2c5e19e504b6f0dd70ad478a57a2fed5e6dceec52b9c9669881776c1ce9340644a", @ANYRESDEC=r6, @ANYRES16, @ANYRES32=0x0, @ANYRES32=r0, @ANYRESHEX=r1, @ANYBLOB="5386e110fa622788c2b6e99eadf2bcdf30f9d319b527fdf186e16e4271870d9cbc90c96182b58157cac146d449a29e364ba6c143c0eab092b33698478749fd9fd202f5c78554898ab85786c9004b2d0d5bd04e9885e43fea692dc43c22fb39bb9f4756707f55737366513f152dfa650785868093773dcdefaf54981abfa5b7c41548a762ed28cf4d4c205ff8202948b032dda856e6358279b648bcb0441b", @ANYRES64=r5, @ANYRESHEX=r0, @ANYBLOB="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"], 0x2c}}, 0x8010) 23:20:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000710007d08eb0b388326"], 0x2c}}, 0x0) 23:20:22 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$rds(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)=""/126, 0x7e}], 0x1, 0x0, 0x0, 0x4000}, 0x40081) 23:20:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x342, 0x7d, 0x200, 0x7}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) 23:20:22 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000180)={@un=@file={0x1, './file0\x00'}, {&(0x7f00000002c0)=""/4096, 0x1000}, &(0x7f0000000000), 0x1d}, 0xa0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x0) 23:20:22 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f0000000180)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x80) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x21c, r1, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_LINK={0x14, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7000000}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x55e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xea0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x24024010}, 0x4004) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x3, 0x6, "4fd2d3", 0x0, 0x1c}) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYRESHEX=r4], 0x2c}, 0x1, 0x0, 0x0, 0xc000804}, 0x0) 23:20:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffe96, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="41806a6bac777276f987c7c44d008dc52b4174373dd3aefd31386844849d7b953adb882fb13fd8c70dc6c19f34bbf8824dee5bf89073d2dbb75c197ceb91c803aab683f6511d04636f20ffc59197230200000000000000c5e2fdeb2a63", @ANYRES64=r1], 0x2c}}, 0x4000810) 23:20:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) 23:20:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x2c}}, 0x0) 23:20:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="78e0d5020cca1677cb175008f616cef5869ba05f8658e47e427045fc7e7349984329b6471f4b586c459304d1b2896118be19d6b270459065d11a9a867a7638c59ebfb56a1627fb8af764b00f91bbe0f9d83fc3806e09d096d88204a9d965ce8331a666f870c355a3074981c1c51b180fce1063fb5f79cc8eded05cd8abaa2da31eed8fca4743e25451ccbc4367589cde81af5cdebee629947a29b434a614586a8fcd0000000000"], 0x2c}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@delnexthop={0x20, 0x69, 0xb38, 0x70bd27, 0x25dfdbfb, {}, [{0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40044) 23:20:23 executing program 4: sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x68, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf95}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@local, @in6=@initdev}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000580)=0xfffffffffffffe85) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000200)={{@my=0x1, 0x2}, @host, 0x0, 0x80000001, 0xf4d, 0xb00, 0x7, 0x3, 0x3}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) 23:20:23 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@map={0x18, 0x7, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x3, 0x9962, 0x28000}, 0x10, 0x0, r1}, 0x78) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000500)={{0x200, 0x8afc}, 0x28}, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400024}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_batadv\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffff}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000440)={@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, {&(0x7f0000000340)=""/132, 0x84}, &(0x7f0000000400), 0x61}, 0xa0) 23:20:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780f325fa6884ab836bb1057d575a4fa5b5cc3e9eea9ad2ba42aab3bb0f6b8aa7688b75a976ff42848634d583cf52b1d5696fec9f6ac31e4662d15b8aa73c82156173d8865838a4e152620ca486ebb3691886422a52998bc0192a4d27b211e632255092a10800"], 0x1c}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x434, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x108, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92a9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x97}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x38db}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a2de601}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff3b9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4b1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9ff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x944e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd34}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x982}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x94f}]}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x41}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xca3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x32f3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x14}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}]}, 0x434}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 23:20:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) getsockopt$netlink(r0, 0x10e, 0x8, &(0x7f0000000000)=""/135, &(0x7f0000000100)=0x87) 23:20:23 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x20, 0x400) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffe0}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sysinfo(&(0x7f0000000180)=""/207) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x0) 23:20:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) socketpair(0x9, 0xc0001, 0xfff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040)={{0x6, 0x1}, 0x10}, 0x10) 23:20:23 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/10], 0xa) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f0000000100)=""/190, 0xbe}, &(0x7f0000000080), 0x11}, 0x20) 23:20:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/150, 0x96}, {&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/155, 0x9b}], 0x9, 0x0, 0x0, 0x20040085}, 0x40000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000018c0)={'sit0\x00', &(0x7f0000001840)={'ip6_vti0\x00', 0x0, 0x29, 0xdb, 0x3, 0x7, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x700, 0x0, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001a00)={'ip_vti0\x00', &(0x7f0000001900)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=r4, @ANYBLOB="78007800000000000000000843e800cc00660000802f9078e00000020a010101440c9b030a01010100000009890fc9ffffffffac1414aaac1e0101830ba4ac1414bb0a01010294040100831fd3e0000001ac14143f64010100ac14142aac1414aa7f000001ac1e0001441039800001000100000009000000019404010044349d23e00000010000000764010101000000057f000001000000057f00000100000000ac14142e000010000a0101000000e441831ff164010100ac1414aaac1e0101ffffffffac1e0001ac1414bbac1414aa89079cac1414aa00"]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r5, &(0x7f0000001780)=@caif=@dbg, &(0x7f0000001800)=0x80) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000001740)={0x1ff, 0x1f}) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x9, 0x7f, 0x7, 0x3f}, 0x6) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000bdea045416bb1a05ad3b0016ff0fe620b2cecdbe03cb4a3c653f0ba76deffc08001a2f59ad919d243a2b252aaa76c851", @ANYRESHEX], 0x2c}}, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000000)) 23:20:23 executing program 3: ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f00000002c0)={0x0, 0x0, @ioapic}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000500)={0x0, 0x0, @ioapic={0x2, 0x2, 0x20, 0x5699748d, 0x0, [{0x6, 0x8, 0x1, '\x00', 0xff}, {0xf8, 0x96, 0x80, '\x00', 0x6}, {0x3, 0x0, 0x3f, '\x00', 0x8}, {0x9, 0xfc, 0x7}, {0x3, 0xfc, 0x2, '\x00', 0x3f}, {0x5, 0x2, 0x5, '\x00', 0x3}, {0x48, 0x2, 0x1, '\x00', 0x20}, {0xba, 0x3, 0x7, '\x00', 0xff}, {0x8, 0x4, 0x7, '\x00', 0xd5}, {0xff, 0x2, 0x2, '\x00', 0x2}, {0x14, 0x4, 0x8}, {0x5, 0x4, 0x20, '\x00', 0x28}, {0x1f, 0x4, 0x1, '\x00', 0x3}, {0x8, 0xb0, 0x6, '\x00', 0x4}, {0xc5, 0x68, 0xa9, '\x00', 0x1}, {0xc2, 0x6, 0x4, '\x00', 0x1}, {0x20, 0x4d, 0x8, '\x00', 0x2}, {0x0, 0xff, 0x7f}, {0x5c, 0x7, 0x0, '\x00', 0xba}, {0x3, 0x3f, 0x7, '\x00', 0x1}, {0xf0, 0xff, 0x81, '\x00', 0x5}, {0x8, 0x80, 0x63, '\x00', 0x6}, {0x81, 0x1f, 0x80, '\x00', 0x6}, {0x1, 0x3, 0x52, '\x00', 0x6}]}}) r1 = syz_open_dev$audion(&(0x7f0000000080), 0x3f, 0x40000) ioctl$IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, &(0x7f0000000100)={0xff, 0xffffffff, 0x1}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x28}, 0x10) 23:20:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd626230b4387b52", &(0x7f0000000080)=@tcp=r0, 0x2}, 0x47) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1a0, r3, 0x800, 0x8, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x87fa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9707}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa92c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4da4}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x55d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9507}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x924}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x53}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x19}, 0x40}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdaa7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20008090) 23:20:23 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000001c0)={@llc={0x1a, 0xffff, 0xb, 0x1, 0x17, 0xb}, {&(0x7f0000000100)=""/189, 0xbd}, &(0x7f0000000000), 0x16}, 0xa0) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000080)={0x10, 0x5, 0x9, 0xffffffff}) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 23:20:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x44091}, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0xfc000000) 23:20:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYRES16], 0x1c}}, 0x0) 23:20:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0], 0x2c}}, 0x44040) clone(0x40080000, &(0x7f0000000600)="7addc7a1418fed7754713b875394fa78afc5b7b79314a0eb5c56ffc9421f4003668a25c3328caab160ea762a2d3cb6aa9b78af37b385ca4c8e38e3", &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="9926b14c4c4552d552bf14db9fffdcd484529c6f0594dd7b6a8bb4ce23d30d19979d0e05b7adeb1c64b9da2d24562d8293887a7620942597d0bf0fcf93d8ab882a6e2c5b606f2a0fac032ca8a0b9108931c67d65e00649e17cc56f89b6ac0b67cc40daf5008dd8a4e9eb028e5f0693d9787de16a2fc6335102f69f68068028c646091201776fc29af581e4c560eb16de37acce8737e3ef2a9054294792af4c43ded72b5f15d35668ce50c259e8ea0572f1ca4705cd393328253f7e3301fc37034677b968e613db4fb58e1596e4bb7a90ee33507a5d015d") getsockname(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000100)=0x80) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc044000}, 0x20048051) socketpair(0x1e, 0x5, 0x6, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0xc044) r4 = syz_open_dev$audion(&(0x7f0000000340), 0x0, 0x221801) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000380)=0x1, 0x4) sendmsg$nl_crypto(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@getstat={0xe0, 0x15, 0x4, 0x70bd2a, 0x25dfdbfc, {{'drbg_nopr_sha1\x00'}, '\x00', '\x00', 0x2000, 0x2000}, [""]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x10) 23:20:23 executing program 2: ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000180)={0x1fe, 0x0, &(0x7f0000ff9000/0x4000)=nil}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000003f5754ed3b68a66ab8b11107bacd26afceb65bf45095de7bf90de5726703a15ae3e56f0143bc0d7e323390d10dc1ddc6b5a197e44753983434157594e5ef751f4143d8f15e9310287bf6368bab5d9c69cf4b4fa005a911c9fab5790b4d3", @ANYRES16=r2, @ANYBLOB="0100000000000000000018000000"], 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000780)={0x208, r4, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}]}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x44}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24df9a50}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff01}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x20000010}, 0x4001) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x218, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x588a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80000000, @remote, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @mcast2, 0x10000}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7948837e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1cf0}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x34}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x40080}, 0x48000) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x188, r1, 0xa00, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x64d38553}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x24000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x418}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "323b772e6aa114488749b7d97a0c2444aaeb22c5b52f56c6274d"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7303}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 23:20:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 23:20:23 executing program 5: accept(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000000)=0x80) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="00022abd7000ffdbdf2514000000900001803c00028008000200bd0400000800040017ffffff0800040090f04a7f080004000000100008000400010000000800030073c6000008000100000000000c000280080002002b00000008000300050000000d0001007564703a73797a31000000002c00028008000400810000f70800040000000000080002000104000008000200560a00000800010016000000"], 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000440)={@nfc={0x27, 0x1, 0x2, 0x1}, {&(0x7f0000000300)=""/193, 0xc1}, &(0x7f0000000400), 0x4}, 0xa0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 23:20:23 executing program 0: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8036000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc081}, 0x20008815) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r1) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c370e4d864d84f780"], 0x1c}}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x40, 0x7800, 0x9, 0x7, {{0x1d, 0x4, 0x1, 0xc, 0x74, 0x66, 0x0, 0x1, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x2e, 0x1, [{0x1, 0x7, "a4539d07a7"}, {0x7, 0xd, "c17080dce443ca07c85136"}, {0x0, 0x8, "6a7842aae0e6"}, {0x2, 0xa, "d4d2359fa20b5d86"}, {0x2, 0x2}]}, @timestamp_prespec={0x44, 0xc, 0x55, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_addr={0x44, 0x14, 0xdd, 0x1, 0x3, [{@multicast2, 0x7fff}, {@multicast2, 0x9}]}, @lsrr={0x83, 0x7, 0x5d, [@dev={0xac, 0x14, 0x14, 0x3a}]}, @noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) r3 = syz_open_dev$audion(&(0x7f0000000280), 0x5, 0x210000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x60, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x50}, 0x8005) socketpair(0x27, 0x2, 0x9, &(0x7f0000000000)) [ 3212.504689] IPVS: ftp: loaded support on port[0] = 21 23:20:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1700001211007d"], 0x2c}}, 0x24040018) 23:20:23 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x26c}, 0x1, 0x0, 0x0, 0x8004}, 0x18055) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 23:20:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYRES32=r1], 0x1c}}, 0x0) 23:20:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept(r0, &(0x7f00000007c0)=@qipcrtr, &(0x7f0000000840)=0x80) sendmsg$nl_crypto(r1, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)=@del={0xf0, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {{'rfc4106-gcm-aesni\x00'}, '\x00', '\x00', 0x2000, 0x4c00}, [{0x8, 0x1, 0x55a}, {0x8, 0x1, 0x6}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000004}, 0x8044080) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x5, 0x5, 0xff, 0x6, 0x90, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x210, r4, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xcc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x7c, 0x3, "7aab018e8a2a8bfe4d1dcb44e54341f746bd81ab1559ab5a9b8f9960ae1e58f95c3cd90f2aee20dbcb4c92268cf67b4a8ca7529ef94602615d5b2877a7ec4ba042e4a0fef49213a117af1c18e476ec7886c7a8155d7c769498590e50ad9352c200049fa0ed2f30f96a547a569428687d2edb60540be040f9"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "245e49e9cbee91d30d93be29aa5d0abbd3e148385e89"}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x85b0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x48b}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6f14c145}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x88}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x12, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x759ac4d3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x359}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008094) getsockname$netlink(r3, &(0x7f0000000700), &(0x7f0000000740)=0xc) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, r6, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x19}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xcc, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x96, 0x3, "e5eab85e50a1fabeb236e93c66c624ae30ccd907a40b1c61c4ce4c53caa1f7a6117164ca0bbecb314f414ef726b827bd2f2d3007be328e19de6a04cae1ff823aa3bca1db19b5c20f1ca58b3f7867060546f17133e3c248d676681baf13234a12982ae99f04f1cbd0cab9ac4db46f4ef02bedeea30e3cc3d5cc9bc1d03a1664a15096276b2d650b5f4f055e9fd3443e7693b5"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x6d941cf88008b4e1}, 0x4) r7 = syz_open_dev$audion(&(0x7f0000000040), 0x9, 0x24081) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000895) 23:20:23 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x294800, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000200)={0x10000, 0x89000}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000", @ANYRES16=0x0, @ANYBLOB="000429bd7000fddbdf2501000000080002000000000008000200010000000800020004000000540001801400040000000000000000000000ffffac14143314000400ff02000000000000000000000000000106000100020000000800030064010100060005d2b3c8be75cea06f21dffb0a89932d004e21000008000300ac1414bb05000200800000003800018008000300ff", @ANYRES32=0x0, @ANYBLOB="14000400fe8800000000000000000000000001010500020006000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4080}, 0x804) 23:20:23 executing program 2: recvfrom$llc(0xffffffffffffffff, &(0x7f00000001c0)=""/170, 0xaa, 0x102, &(0x7f00000002c0)={0x1a, 0x30b, 0x6, 0x4f, 0x7f, 0x7, @multicast}, 0x10) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001300)={&(0x7f0000000300)=[0x5, 0x2, 0x1000, 0xfffffff8, 0x1, 0x40, 0xffff, 0x80000001, 0x4, 0x40, 0x96f9bcb2, 0xa1c7, 0x7f, 0x10001, 0x3, 0xeab3, 0x3, 0x7, 0x8, 0x8, 0x7, 0x4, 0x8e1, 0xff, 0xd1, 0xc303, 0x5, 0x8000, 0x5, 0x9ac4, 0x2000000, 0x44c69fc2, 0x6, 0x6, 0xc7, 0x68f, 0x0, 0x5, 0x0, 0x6, 0x10001, 0x9d9, 0x1ff, 0x3, 0x8, 0x7, 0x8, 0x7fff, 0x9, 0xffff, 0xfffffe01, 0x0, 0x4, 0xffff, 0x3, 0x23, 0x7ff, 0x175, 0x401, 0x2, 0x2, 0x2420c5c8, 0x2, 0x94a, 0x0, 0x81, 0xfffffffc, 0x10001, 0xba, 0x2, 0x10e4, 0x7f, 0x6, 0x7fffffff, 0x40, 0xbe, 0x9, 0x5, 0x3, 0x7, 0x9, 0x9, 0x7fffffff, 0xfe, 0x9, 0x4, 0x1, 0x4, 0x9, 0x3, 0x7f, 0xffff, 0x18, 0x12, 0x6, 0x8059, 0x9, 0x9f7, 0x9, 0x8, 0x1ff, 0x9, 0x3000, 0x2, 0x7, 0x5, 0x80000000, 0x1, 0xfffffffe, 0x1, 0x72, 0x8001, 0x7, 0xffff, 0x3, 0x101, 0x3ff, 0x7, 0x200, 0x5, 0x0, 0x0, 0x40, 0x7, 0x2abc, 0x5, 0x1, 0xaf3a0000, 0x0, 0x91e4, 0x0, 0x1, 0xfffffff9, 0x7, 0x8, 0x5, 0x2f3, 0x8, 0x0, 0x7, 0x1, 0xae83, 0x80000000, 0x2, 0x400, 0x2a080, 0x9, 0x20, 0x9, 0x6, 0x7, 0x1, 0x10000, 0x2, 0x6, 0x6, 0x8, 0x10001, 0x9, 0xffffffff, 0x21a6, 0x9, 0x2b9d75d5, 0x8000, 0xfa, 0x6, 0x2, 0x3, 0x2, 0x2, 0x9, 0x0, 0x9, 0x29a, 0x9, 0x1f, 0x5, 0x6, 0x1, 0xffffffff, 0x400, 0x8, 0x5, 0x101, 0x7ff, 0x6, 0x1, 0xe532, 0x20, 0xfff, 0x9, 0x81, 0x400, 0xffffff7f, 0x1000, 0xfffffd0b, 0x80000001, 0x101, 0x9, 0x8, 0x7, 0x6, 0x7, 0xdb, 0x8, 0x8, 0x1, 0x8, 0x4fb016ce, 0x5, 0x7, 0xffffffff, 0xfffffffe, 0x7, 0x4, 0x5, 0xd6c, 0xfffffffb, 0x1, 0x8, 0x5, 0x80000000, 0x80000000, 0x5, 0x81, 0xfffffff9, 0x4, 0x5, 0x7f, 0x8001, 0x7, 0x6, 0x1ff, 0x7fffffff, 0x5, 0x0, 0xff, 0x1, 0x8, 0x121e, 0x1000, 0x9a7, 0x4, 0xfffff214, 0x6, 0x3, 0xffffff1e, 0xffffffe2, 0x400, 0x58, 0x0, 0x9, 0x80000000, 0xe4, 0x1, 0x401, 0x4, 0x3, 0x24a, 0xcd, 0x1, 0x10000000, 0x80000001, 0x4, 0x6, 0x400, 0x2, 0x6, 0x0, 0x8, 0x9, 0xfffeffff, 0x6, 0x4f, 0x6, 0x0, 0x1ff, 0x6, 0x7, 0x2, 0x101, 0x200, 0x10001, 0x0, 0x5, 0xffff7fff, 0x1000, 0x5, 0x7, 0x5, 0x3f, 0x7fff, 0x8, 0x8, 0x5, 0x8, 0x7, 0x0, 0x2, 0x4, 0x7, 0x3ff, 0x4292, 0x60, 0x0, 0x63, 0xe17, 0xc5, 0x1, 0x3f, 0x80000000, 0xffff231b, 0x7, 0xffff, 0x4, 0x1, 0x9, 0x0, 0x2, 0x9, 0x20, 0x1ff, 0xfffffff7, 0xfff, 0x1ff, 0x1000, 0xfff, 0xf96, 0xd8000000, 0xfffff3aa, 0x9, 0x10001, 0x200, 0x400, 0x4, 0xffffff42, 0x6, 0x0, 0x3f, 0x6, 0xa32, 0x40, 0x101, 0x8, 0x5, 0x81, 0x101, 0x7, 0x3, 0x7, 0xfffffffe, 0xd0d0, 0x800, 0x9, 0x8, 0x9, 0x3, 0x8, 0x8, 0x0, 0x6, 0x9, 0x401, 0x4, 0x5, 0x3f, 0x1f, 0xb07, 0x3, 0x1fe, 0x2, 0x3, 0x7, 0x8000, 0x8, 0x0, 0x8d, 0x5, 0x36, 0x5, 0x6, 0x9, 0x6, 0x9, 0x7, 0x200, 0x2, 0x9, 0xffff, 0x5, 0x9, 0x3, 0x2, 0x1f, 0x4620, 0x18d, 0x8, 0x7fff, 0x7ddec1d9, 0x7, 0xb56e, 0x3f, 0x5, 0x3a29, 0x92eb, 0x10aa, 0x8000, 0x8, 0x0, 0x1, 0x7, 0x5, 0x3ff, 0x8001, 0x8001, 0x1, 0x9, 0xf5, 0x80000000, 0x5, 0x800, 0x7, 0x7ba, 0xa0cc, 0x8001, 0x8, 0x9, 0x8, 0x1, 0x1, 0x5, 0x5, 0xa3, 0x80000001, 0x4, 0x2, 0xfff, 0x8, 0xffffffff, 0x4, 0x8a5, 0x0, 0x0, 0x0, 0x4, 0x5, 0x80, 0xac2f, 0xd25e, 0x7, 0x28, 0x3, 0x1, 0x0, 0x8000, 0x5a96, 0x5a1e, 0x1, 0x8, 0x5, 0x3, 0x1ff, 0x10001, 0x652, 0x9, 0x3, 0x80, 0xff, 0x80, 0xff000000, 0x3, 0x7fffffff, 0xaae, 0xb10, 0x3, 0xffff0001, 0x2, 0x11f, 0x100, 0xb3, 0x5, 0x91a8, 0x81, 0x3, 0x1, 0x8, 0x9, 0x200, 0xdfc5, 0x80, 0x6, 0x8, 0x8b, 0x8000, 0x3, 0x9, 0x9, 0x0, 0x400000, 0xa1a0, 0xeb6, 0x9, 0x4, 0xffff, 0x80, 0x1, 0x2, 0x81, 0x101, 0x3dd1, 0x2, 0x3f00000, 0x5, 0x5, 0x6, 0x7, 0x4, 0x1000, 0xff, 0xac, 0x1, 0x80000001, 0xffffff76, 0x7ff, 0x6, 0x7, 0x8, 0x566, 0x3ff, 0x4, 0x7fff, 0x9, 0x3, 0x3, 0x20, 0x2f4e, 0x3, 0x6, 0x100, 0x20, 0x100, 0x6, 0x1, 0x6, 0x3, 0x40, 0x2806, 0x400, 0x7, 0x1, 0x1d, 0x8, 0xffff1bc5, 0x2, 0xfff, 0x10000, 0xf, 0x1, 0x6, 0x7, 0x7f, 0x7, 0x7, 0x3, 0xcaf, 0x3f, 0x8000000, 0x3, 0x7, 0x3, 0x4, 0x0, 0x7, 0x10, 0x4, 0x7, 0x1ff, 0x4, 0x101, 0xb8, 0x400, 0x8000, 0x7, 0x4, 0x7fff, 0x0, 0x1, 0xb29, 0x7, 0x0, 0x7, 0x4, 0x7, 0x7, 0x7ff, 0x0, 0xfff, 0x1ff, 0x9, 0x80000001, 0x7ff, 0x2, 0x1ff, 0x3, 0x1, 0x0, 0xfffffffe, 0x1ff, 0x6, 0x1, 0x47d, 0x80, 0xffff0000, 0x40, 0x80000001, 0x62, 0x5, 0x10000, 0x3, 0x0, 0x9, 0x4, 0xffffff7f, 0x588, 0x1000, 0x9, 0x8, 0x6, 0x0, 0x401, 0xfff, 0x5, 0x0, 0x6, 0x5, 0x7, 0x65a, 0x1, 0xfffffffc, 0x8, 0x9, 0x3, 0x8, 0x8, 0x2, 0x9, 0x330950e, 0x0, 0x9, 0x80, 0x8, 0x7, 0x6, 0x1341, 0x9, 0xfffffffe, 0x7, 0x5cd, 0x0, 0x40, 0x3, 0x8, 0x0, 0x0, 0x1, 0x561, 0x6, 0x4, 0x7, 0x0, 0x1, 0x5, 0x6, 0x5, 0x4, 0x2, 0x4, 0x400, 0x81, 0x4, 0x0, 0xffffffff, 0x8000, 0x8, 0x3, 0x7, 0x7, 0x1a5d8136, 0x9000000, 0x67, 0x1, 0xc40a, 0x3, 0x80000000, 0x6, 0x2bf2, 0x1c95, 0x9, 0x1, 0x101, 0x4, 0x3, 0x8, 0x7fff, 0x800, 0x3, 0x81, 0xff, 0x6, 0x9, 0x7, 0x8, 0x4, 0x1, 0x668, 0x2, 0xbd, 0x61a, 0x6, 0x1000, 0x7, 0x401, 0x1, 0xb32, 0x3e, 0x3, 0x200, 0x401, 0x0, 0x0, 0x7f, 0x20, 0x7, 0x8, 0x3f, 0x2, 0x4a, 0xfffffffa, 0x5, 0x3c4f, 0x3, 0x40, 0x3, 0x87, 0x163d, 0x1000, 0x3ff, 0x1, 0x7fffffff, 0x461, 0x2, 0xffff, 0x2, 0x4, 0x7, 0x8, 0x0, 0x40, 0x2, 0x1000, 0x61, 0x1f, 0x4, 0xe7, 0x400, 0xff, 0xfffffff7, 0xffff, 0xe3b, 0xfffffff8, 0x64e, 0x0, 0x8, 0x6, 0x2, 0xffff, 0x400, 0x4, 0x101, 0x0, 0x7, 0x34a, 0x1f, 0x7, 0x3, 0xffffffff, 0x101, 0xfff, 0x80000001, 0x7, 0x80, 0x2, 0x6, 0x5, 0x9, 0x4, 0x45c, 0x7, 0x2, 0x3, 0x4, 0x5, 0xfffffffc, 0x7, 0xfffffe00, 0x3, 0x1, 0x3, 0x7, 0x4, 0x5, 0xffff, 0x1, 0x3, 0x6, 0x800, 0x3f, 0x3f, 0x10001, 0x7c5e, 0x0, 0x7fffffff, 0x179c, 0x0, 0x48dc, 0x7f, 0x10001, 0x401, 0xfffffffd, 0x8, 0xfe8f, 0xfffffe01, 0x0, 0x1, 0x81, 0xbca8, 0x7, 0x0, 0x6, 0x4, 0xf1, 0x39d7, 0xa000, 0x401, 0x3, 0x7, 0xfff, 0x1, 0x77, 0x40, 0x5, 0xff, 0xffffffff, 0xd99b, 0x10001, 0x2, 0x7f, 0x8, 0x10000, 0x8, 0x8, 0x0, 0x8, 0x4, 0x4, 0x101, 0xfffffffc, 0xfa2f, 0x5, 0x4d, 0xffff, 0xd003, 0x1, 0x5, 0x101, 0x0, 0xfffffff8, 0x4, 0x9, 0x6, 0x7, 0x1, 0xffffffff, 0x8, 0x200000, 0x7, 0x2, 0x5, 0x7fff, 0x40, 0x1, 0x5, 0x4f23103b, 0x400, 0x7ff, 0x3ff, 0x1f, 0x101, 0xffffffff, 0x6, 0x30000, 0xa7e0, 0x800, 0x3f, 0x4a3a, 0x1, 0x7, 0x7, 0x200, 0xffffffff, 0x7dd, 0x9, 0x7, 0x3f, 0x1ff, 0x9, 0x3ff, 0x8, 0x4, 0x10001, 0x1000, 0x7e, 0x3, 0x0, 0x7fffffff, 0x4, 0x8000, 0x1, 0x407f, 0x9, 0x7, 0x1, 0x1, 0x932d, 0x4, 0x5527, 0x8, 0x5, 0x9, 0x2, 0x4, 0x3, 0x7, 0x10000, 0xfffffffb, 0x100, 0x0, 0x40, 0x5, 0x6, 0x2, 0x80000001, 0x200, 0x3, 0x81, 0x2, 0x8, 0x7, 0x5, 0x9, 0x8, 0x4, 0x7, 0x3, 0x3, 0x6, 0xfffffff7, 0x2, 0xcc, 0x101, 0x2, 0x938, 0x9, 0x79bc, 0x8, 0x8001, 0x4a, 0xffff, 0x2, 0x7, 0x3, 0x0, 0x1, 0x81, 0x7, 0xcef, 0x1, 0x6, 0x2, 0x1, 0x2, 0x3ff, 0x80000000, 0xf76, 0x3, 0x3, 0x418f, 0x2, 0xe48a, 0x2, 0x800, 0x1, 0x7, 0x4, 0x6, 0x3ff, 0x800, 0x2, 0x4, 0x3, 0x5, 0x0, 0x80000000, 0x2, 0x4, 0x7, 0xfffffffb, 0x1ff, 0x5a, 0x0, 0x5, 0xc4a, 0x8001, 0x7], 0x6, 0x400, 0xff, 0xff}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000001480)=ANY=[@ANYBLOB="50000020480000af883f5a8bc982042bbd7000fd84bb2cef55551214bfd7afa2078d3558d75537cf18f19100bb9e234a3efeccfb856357ec3700f7ab448b6e27aa9628e1104b9cdf46fa1eff444e6ae27b1a2da59fad97c0d14a85fd5dbcb3dfb6f4189383c84356c57143ceb836e0d028179bd6ea563af1ab4595e121ccad2663704c249b200e3814989ec1e6a37259b0bfdbf9e2212e17e4e27657b3be4eaf6405ef7b7ca1e21ee3d6af1b2f3e0119d53b76ef20943a3c820e7efb681fa99114ca00222f49c4cd1e3870b0537a8c48f36e2e2f81d124586f81aa7cc16997a1e9d30c43b806382677a3143382478fe43289e73a78ae00ac3a0b", @ANYRES32=0x0, @ANYBLOB="01800000140001000000000000000000000000000000000008000200050000006bb6329749997e3ffb0646c7190800020006000000080002"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) socketpair(0x3, 0x3, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x10000, [0x3, 0x20], 0x400}, 0x10) 23:20:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x7, 0x92000) [ 3212.820444] nla_parse: 53 callbacks suppressed [ 3212.820451] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3212.906852] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3213.059810] IPVS: ftp: loaded support on port[0] = 21 23:20:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) 23:20:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x6, 0x4, 0xfffffff7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x160, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "9e644e29155cc35a7cc4b4b8ddcf15ee806e651a67277bb3a1e9b6adb6"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "70309599a0c0fb3bc913832a045bec543c9e721b51cffa6a3c086ff49805262aadc3"}}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3cdd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x200, @remote, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x41f}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) connect$netlink(r1, &(0x7f0000000040)=@unspec, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r4) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r1) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r5, 0x300, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c1}, 0x4048810) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d91f780"], 0x1c}}, 0x10) 23:20:24 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000180)={@l2={0x1f, 0x1, @none, 0xe416, 0x1}, {&(0x7f0000000100)=""/96, 0x60}}, 0xa0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000080), 0x2, 0x800) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000240)={0x2, "05e8"}, 0x3) 23:20:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0xffffffc0, 0x3}) 23:20:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="179bf401fa61e255240237bd00000011007d"], 0x2c}}, 0x24044850) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000180)={@tipc=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x2, 0x1}}, {&(0x7f0000000040)=""/17, 0x11}, &(0x7f0000000080), 0x1b}, 0xa0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$isdn(r1, &(0x7f0000000000)={0x22, 0x96, 0x5, 0x81, 0xfe}, 0x6) 23:20:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000811007d", @ANYRESHEX], 0x2c}}, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000040)={0x5, 0x9}) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000080)=0x400, 0x8) 23:20:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x7f, 0x7, 0x24, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7880, 0x7, 0x7, 0x20}}) [ 3213.317650] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:20:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@buf) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000100)=0xfffffffe, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="aed4f45ab1558202fd846e43b5f59566167a5e3af4a2d136cc66aa4208e3756c71bbd641d74727c21a972107cb59c36a5b84baa9c488122ac2f57088a240145b7fb53e4d8d45f121a0975ab6625255bedf4021a21afc"], 0x2c}}, 0x0) 23:20:24 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x1, 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x5, @remote}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000100)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @ldst={0x3, 0x1, 0x6, 0x9, 0x6, 0x4}, @exit, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x692}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @ldst={0x2, 0x2, 0x0, 0xa, 0x0, 0x20, 0x4}], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x5d, &(0x7f0000000180)=""/93, 0x41000, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xd, 0x10001, 0x7}, 0x10}, 0x78) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x9, &(0x7f0000000300)=@raw=[@generic={0x8, 0x4, 0x5, 0x0, 0xd8a5}, @generic={0x5, 0xd, 0x3, 0xf646, 0x5}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @alu={0x4, 0x1, 0x0, 0xb, 0x8, 0x50, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x3}, @alu={0xa34e1e4eb6d37b6, 0x1, 0x1, 0x6, 0x8, 0xffffffffffffffc0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000000380)='GPL\x00', 0x55b, 0x97, &(0x7f00000003c0)=""/151, 0x40f00, 0x10, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x10, 0xfff, 0x9}, 0x10, 0xffffffffffffffff}, 0x78) r4 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)=@setlink={0xac, 0x13, 0x2, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x42800, 0x4000}, [@IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FD={0x8}]}, @IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_WEIGHT={0x8, 0xf, 0x7fffffff}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xe1a7}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FD={0x8}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}]}, 0xac}}, 0x4) [ 3213.361986] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:20:24 executing program 0: socket$nl_route(0x10, 0x3, 0x0) 23:20:24 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000100)={0x7, 0x0, [{0x7, 0x3, 0x0, 0x0, @sint={0x7, 0x1}}, {0x3, 0x3, 0x0, 0x0, @msi={0x2, 0x8, 0x2, 0xa3fd}}, {0x2, 0x3, 0x0, 0x0, @irqchip={0x2, 0x1}}, {0x0, 0x3, 0x0, 0x0, @msi={0x7fffffff, 0x1, 0xff, 0x6}}, {0xc1f4, 0x2, 0x0, 0x0, @adapter={0x100000001, 0x0, 0x0, 0x83, 0x4}}, {0x1, 0x1, 0x0, 0x0, @adapter={0xba, 0x10000, 0x6, 0x18000, 0x4}}, {0x1, 0x4, 0x0, 0x0, @msi={0x7fffffff, 0x1, 0x8e, 0x10000}}]}) 23:20:24 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000240)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x408d4}, 0x4044080) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x5, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00641ebfba952937293e305b0011007d", @ANYRES32], 0x2c}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000280)={[{0x20, 0x7, 0x40, 0xff, 0x1, 0x4, 0x2, 0x5, 0x5, 0x6, 0x2, 0x40, 0x878}, {0x9, 0x40, 0x7, 0x4, 0xd8, 0x1, 0x4c, 0x81, 0x9, 0x0, 0x0, 0x8, 0xbf34}, {0x1, 0x300, 0xb0, 0x9, 0x1, 0x8a, 0xff, 0x2b, 0x0, 0xff, 0x0, 0xc1, 0x6}], 0x3f}) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r3, 0x10, 0x70bd28, 0x25dfdbfb}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x448a0) 23:20:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r4, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xb8b}, @L2TP_ATTR_RECV_TIMEOUT={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20008050) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r3, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002abd7000fcdbdf2508000000000000000100000014002000ff02000000000000000000000000000106001c0007000000050022000100000006000e00ff07000005000700020000000c0010000800000000000000060001000a00000008001800ffffffff"], 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) 23:20:24 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$rds(r0, &(0x7f0000000280)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x5e4356a6694c2bf8) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xb0, r2, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd2d8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf96}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xb0}}, 0x8000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 23:20:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0x1, &(0x7f0000000000)="5d9272b475974afaf347713f0f6b553f5f7a8260bec1ad257d36a70947b20c7c81164d13e6cf27fa7b16af7caafecad58dfe1c85d51de59d15d571dfa01d9014380e1534379c53b124bd2844d525f352b90bc6c52ea62ee5350c62f0bfd78b1b4d3d9545571d22f3", &(0x7f0000000080)=@tcp, 0x4}, 0x20) 23:20:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00002e1d00391fd913444d864d84f780"], 0x1c}}, 0x0) [ 3213.433805] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 23:20:24 executing program 1: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bind$isdn(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0xe0, 0x5, 0x9, 0xa6}, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000180)=@tipc=@name, &(0x7f0000000080)=0x80) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000200)="0fbabc0589be3849702dceabba88197485b65b39644e781825bf0ded7ae59eabcc626a9e91aa6acd982c294ebe381f0991e609590754bf78cc1df7be8b1df28dc8e76e0af7397340894d8c6d087377389ea9f6379ecf0af39d3d7883a1c190b739d3157b657f55dcdc30682b95c759a4fd30b370233407a57b") setsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000000100)=0x5, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 23:20:24 executing program 2: socketpair(0x2a, 0x3, 0x80, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xa}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x401}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4048000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='}\x00\x00\x00\x00\x00\x00'], 0x2c}}, 0x0) 23:20:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f7805042bd391493164a8b06ccfddc63707a9d40275c96c3b7839b536c0edc0000a1fda57453d42a5ce774875531ab4c0d48340302e4161a2fe79a01f07b136aea40d61afad358efab5b7e02764fcc63e43dc4a63f6261e32934585d10c00dbf0092b8205527bde3540ab59e220b099c53d1073e"], 0x1c}}, 0x0) 23:20:24 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e1d, @multicast1}, 0x10) 23:20:24 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0x4}) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0xe9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) [ 3213.570520] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:20:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRESOCT=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4004844}, 0x0) 23:20:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) 23:20:24 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockname(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000100)=0x80) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000000), 0x1) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 23:20:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000100075"], 0x2c}}, 0x0) 23:20:24 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000334533eeea7d092d4d864d84f780"], 0x1c}}, 0x0) 23:20:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$isdn(r1, &(0x7f0000000080)={0x22, 0x4d, 0x7, 0x9c, 0x6}, 0x6) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@nfc={0x27, 0x1, 0x0, 0x1}, {&(0x7f0000000180)=""/208, 0xd0}, &(0x7f0000000040), 0x4}, 0xa0) [ 3213.721015] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3213.758725] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:20:24 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) [ 3213.839069] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:20:24 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000100), 0x7fffffff, 0x80000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000380)={'syztnl2\x00', r1, 0x10, 0x80, 0x800, 0x3, {{0xa, 0x4, 0x0, 0x8, 0x28, 0x66, 0x0, 0x81, 0x7d, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @noop, @generic={0x88, 0x2}, @generic={0x86, 0xe, "1a195919048c492e5e96be38"}]}}}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780513073c4ae2ba6580e153c66b2f5f8dc748b187e6ae6f00aba5e2016b901d262e727760a66040325cb019073f4925e865e6d7fc2e17e898d25f434b3d3875afb012feb8b448da6eab6ae53f900c9c639dca8a51a144bb0153cb204cbe3f627aca82eb1ff08b3851b825e63a24c5772bb7fd93d0792c4942b2adf07e6128f3f1e124c0b0be7c04908447211fddfac3dd220db7513cb9e2c820e3d062637eff5938653194b92000000000000000095b30b433d89375d24c1911f967188e265e7ff4d33b523a827a1075bbfad12bc01bdccbe5ed2c2b0505cdae8ae4492f12516dc17992b"], 0x1c}}, 0x0) 23:20:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in6=@private0}}, &(0x7f00000002c0)=0xe8) 23:20:24 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000000)) 23:20:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080), 0x8fc2, 0x101000) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x28180, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8440, 0x0) getsockname(r1, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000240)=0x80) getsockname(r2, &(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000500)=0x80) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0c002bbd00000000000000060000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) socket$isdn_base(0x22, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x428581, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r5, 0x8250aea6, &(0x7f0000000000)=""/89) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@loopback, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000780)=0xe8) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000440)={0x0, 0x8f7, &(0x7f0000000300)="875f404a38450d3209408759050bbaf222794c5e65e2d42e3c1e954b97f9a83bf7795d1708fd36c765abcb084e31f4b28a8af8e43a21bf6a97580645d6370004367b3de9aad70fc6cfe9d307b53af04c4442659906e76e4e3ffbfa300587cb736fd23581012d008fad89cb5b57fef5397127949789527725613e08a53ae5615319122af653af0ddc947051c5822be178ab0e37f28e049bffb007863d91926861f22d587bb3273fb191984ceaedd4b0b1d3d4a31f3ba2577b18f5bbc9d4646618c71d1eb493f521563d078b", &(0x7f0000000400)="3710150084b71b664e65304e25b985d76a69e05e3ef6d21e420f", 0xcb, 0x1a}) 23:20:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$isdn(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x4, 0x1, 0x40, 0x1}, 0x6) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000e8244749e85a8a4ce3685d7b3283a3f9da66b0694cda9d8cf9b5192984ef7c9b3868eb9861382121826c113e1fc3c7d93619e4823e9ca1113e8b0d3fea79f29ccc2635b0725cca54de8bf2f2ece43467f9b22b2d017f09cf106fc669b9f99fad2c231a94b910ee763d1c3b8c06a613bba3792ba0a8d9fcd2be22c98e863841418f7ad3d574d9b9c752dcce8cb74f1a05966adcba6ba82d1ed9a3860e5417f2949f", @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x884) [ 3213.900595] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3213.906283] RDS: rds_bind could not find a transport for 224.0.0.1, load rds_tcp or rds_rdma? 23:20:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84caf1f19c9e3e23ea659283cead622ce300620192569e346cc91aeda97e919ca125828361649aebd19a74c3065f5f25459b6844417837510bdc90b05db36b8ce0a11f66f847b1e67c6467e19d26d205c5e8e7"], 0x2c}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000100)={0xfffffc00, 0x8, 0x7f}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000080)=0x5, 0x8) r3 = getpid() ptrace$getsig(0x4202, r3, 0x28000, &(0x7f0000000000)) 23:20:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="030000007d"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0x4, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @generic={0xff, 0x8, 0x3, 0x6, 0x7}], &(0x7f0000000040)='GPL\x00', 0x7fffffff, 0xd6, &(0x7f0000000180)=""/214, 0x41100, 0x8, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0x10, 0x401, 0x2}, 0x10, 0xffffffffffffffff}, 0x78) 23:20:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) r1 = accept(r0, 0x0, &(0x7f0000000100)) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x2e0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x2cc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xce, 0x3, "962942eeba06a8b818242c9e411439e0be9f9620ee90b2cf85cf0debb3f40aa04ca7fd5def258927ecea34cc1efc00aade437ae44ff7b1d4fa1960dcc09c33d4f57464a7fe0488edb504de66859d02a20736bb7b4845f1e257d360ed5caa291dd14e24104b359ecec7f0399c6a02b83df15453d43ea28f05cd1a4877a3142ac6fec9b54c312f8d104f885f39ba60303c2738c67c0014c61dc71601ae1b4944a54819ef1914441232a329b787db8f289513d0ae57b2bc4cc0cc2c1cf14fa9345723bb8a665306fe222302"}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "cdcaa4f6bf72054d9ddf46f9146da25344ec1cfee1580e08c24348658f303a27324c8a78385bd6389914a130a9c3cc8103028aaf1687552f476993f697c6e6f009a7bef6fafe4332f07648ed2f61abaa68a1057d203bc367f22df7aff20eb3b8b208a9ba29ad835be99d3a90a707ab453dd06990c16690dc93cc49ca87ca2ecedb833ade6d27178811bcca0b73d5f2a497adddd13b4ad6bd81f672284de83919d7"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "6c07a0867ac82b27f43b4f626b8931dca3dbfc8bc1229fc2e9071526841f372845"}}, @TIPC_NLA_NODE_ID={0xfc, 0x3, "3e4e217c65746c672200420f7b7c590d73631f2f279a1697f7de54f2c6a1d06536e2e909a50a42f9084b21b863f062f323d65e185c9f6f3addbda5c488286695f550f960522e722e9c724ab3bc19fa6efa10432fe90930be2574c394bf2d440c2ddebc1cb201ded4854ed2324a975effe23710e4393101ec003a6c0a039d217dfe5b5f8cb07bbf843726634a3f1ef220ef0eb4e37609432095ed6ee4b5ec33cd5eedc4ef1f22e476e1f7536a91d76267f8ce597a054894c5f71e71f5e516e02fac3d5a0c1facb5b1442ececc61ed1a5b8d8fe2251c588985c1d4035232997f5e6c06303711a4776a0423515698384fc24587d0fcec96407f"}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x840}, 0x20000010) r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000040)=0x10, 0x180800) getsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 23:20:25 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) socketpair(0x18, 0x800, 0x80, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000080)={0x3, "a44ca4"}, 0x4) 23:20:25 executing program 4: setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f}, @nfc={0x27, 0x0, 0x0, 0x5}, @isdn={0x22, 0x2, 0x0, 0x4, 0x40}, 0xfffe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0xa515}) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x24}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x48000) 23:20:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x10c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffe00}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdd34}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xecf}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8040}, 0x40000c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40080}, 0x40) getsockname(r4, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000080)=0x80) 23:20:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c0"], 0x1c}}, 0x0) 23:20:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004810) 23:20:25 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000100)=""/33, 0x21}, &(0x7f0000000140), 0x8}, 0x20) r0 = syz_open_dev$audion(&(0x7f0000000040), 0x74c, 0x4001) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) socket$netlink(0x10, 0x3, 0x1) 23:20:25 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x4e64, @multicast2}, 0x10) 23:20:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0], 0x2c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x4002, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8040) 23:20:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x80000) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000040)={r1, 0x81, 0x1, "9772a339a6d84e462dabf6ff15a996d3bb478c8c5ff7cf4c9d97b1971ebe129e448fd3cc76500cee11394ad00bc6e658028f10b5263948b9820207e2350eb9d2cfb6a4312c7c08ebbf5d445573fa52cf0371542444a24d27b56438744414b131756d2065a6408c25cce2ff1e6eb2eba3e7786ba769f1e606a9d18cc4f041eb399e6db6146bf32948d0a5f52b8a6eca571d5249acee0825550d89843ed533d0103c8e6b8f2dffb6f569fca797d73ebceab43a6eb312bd2914e28f8e5257c71a651c03e01fb801189cc1936eacc362a6cdbdd44bb6fb6dacb5aef23e"}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) 23:20:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x840) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) getsockopt$netlink(r1, 0x10e, 0x2, &(0x7f0000000180)=""/206, &(0x7f0000000080)=0xce) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1700000011007dbf14295d55c2086fc784f6fd"], 0x2c}}, 0x0) 23:20:25 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) accept(r0, &(0x7f0000000100)=@in={0x2, 0x0, @remote}, &(0x7f0000000080)=0x80) r1 = syz_open_dev$audion(&(0x7f0000000180), 0x2, 0x10000) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040), 0xfffffef8) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$vsock_stream(r2, &(0x7f0000000d80)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) sendmsg$rds(r2, &(0x7f0000000d00)={&(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)=""/22, 0x16}], 0x1, &(0x7f0000000b40)=[@cswp={0x58, 0x114, 0x7, {{0x0, 0x2}, &(0x7f0000000280)=0x9b1, &(0x7f00000002c0)=0x5, 0x7, 0xfffffffffffffff9, 0x7fff, 0x4, 0x4, 0xa55}}, @rdma_args={0x48, 0x114, 0x1, {{0x5, 0x1}, {&(0x7f0000000300)=""/189, 0xbd}, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/137, 0x89}, {&(0x7f0000000480)=""/229, 0xe5}, {&(0x7f0000000580)=""/180, 0xb4}], 0x3, 0x0, 0x6}}, @rdma_dest={0x18, 0x114, 0x2, {0x9, 0x7484bc40}}, @rdma_dest={0x18, 0x114, 0x2, {0x3, 0x5}}, @rdma_dest={0x18, 0x114, 0x2, {0x9, 0x7fff}}, @mask_fadd={0x58, 0x114, 0x8, {{0x725, 0x2}, &(0x7f0000000680)=0x3, &(0x7f00000006c0)=0x4, 0x1, 0xffffffffffffff31, 0x217e, 0x200, 0x0, 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0x101, 0x8}, {&(0x7f0000000700)=""/114, 0x72}, &(0x7f0000000ac0)=[{&(0x7f0000000780)=""/82, 0x52}, {&(0x7f0000000800)=""/51, 0x33}, {&(0x7f0000000840)=""/217, 0xd9}, {&(0x7f0000000940)=""/127, 0x7f}, {&(0x7f00000009c0)=""/224, 0xe0}], 0x5, 0x4, 0xa1}}], 0x188, 0x20000004}, 0x805) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 23:20:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/11], 0x2c}}, 0x0) 23:20:25 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) 23:20:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) eventfd(0x3) 23:20:25 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x6, 0x10001, 0x36, 0x9]}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 23:20:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000c3b1ed0a0fe5e05f7026fb3416760011007d", @ANYRESHEX], 0x2c}}, 0x0) 23:20:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xfc, r1, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1c09}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf7eb}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x86}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8fb}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffc243}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6959}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x400c0d5}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000024c0)={'syztnl0\x00', 0x0}) socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x95, 0x3, 0x20, @private0, @mcast2, 0x1, 0x40, 0x1ff, 0x101}}) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@alg={0x118, 0x10, 0x100, 0x70bd25, 0x25dfdbfd, {{'generic-gcm-aesni\x00'}, '\x00', '\x00', 0x400}, [{0x8, 0x1, 0x8}, {0x8, 0x1, 0x825}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x3}, {0x8, 0x1, 0x40}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x2}]}, 0x118}, 0x1, 0x0, 0x0, 0x4}, 0x4010) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) getsockopt$netlink(r5, 0x10e, 0x2, &(0x7f0000000180)=""/72, &(0x7f0000000100)=0x48) 23:20:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000100), 0x7, 0x442) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x400}]}, &(0x7f0000000080)='syzkaller\x00', 0x200, 0x60, &(0x7f0000000180)=""/96, 0x41000, 0x13, '\x00', 0x0, 0x8, r1, 0x8, &(0x7f0000000200)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x4, 0x3f, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x2c}}, 0x4000081) 23:20:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="e401845435008c6c92f9977c7a1b52e831740000", @ANYRES16=r1, @ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x10}, 0x24048880) r2 = accept(r0, &(0x7f0000000300)=@ethernet={0x0, @multicast}, &(0x7f0000000380)=0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x29, 0x3b, 0x20, 0x1, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x8, 0x20, 0xc8, 0x401}}) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000840)=ANY=[@ANYBLOB="000200008d41dfa5dfe83a12fd225b836b137518519e8243b58990ae3481606acdce00ffb595a5a1248c0284dc5cc211347f883b88296889c5703a51a2e108272477714114bd49ece236ccb8f992918f508f4801af44f05bed130ae8f9446ea978e61cd60d40809afc39d643500331ca7f", @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf257539dacc3fa34966070000006da163ed5387faa5f6c26f3ecd3698d4aef1e3ee95ff531025139d8b973dd889991ac5d9529757de4b0b11d53121daefb19ff49f7eeb4abeba4234d375a15c1b38a93f519100"], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c200039dc15cb00"/17], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x6) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000000)={0xffffffff, 0x505}) 23:20:25 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r1 = accept(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000080)=0x80) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)={0x1, "f3"}, 0x2) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)=@buf) 23:20:25 executing program 4: socket$nl_route(0x10, 0x3, 0x0) 23:20:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700005db90026251afafb8318002b79e94b0c0dbefce4cc39bdb66242e43b3d3b3ee28a458d039bcc142dc89b0328bc2cbfe5206a03cdedfd3c987d7c357951a895b325ee26c985bf12891fa9587431f5291b8ec008a6b0661192827b0f9bb7250bfa14aa45442d30b641f8e3bfc9a50ca429b217d6b680182ab60893a8e9f202536aa515c613d7d50e7cddf05279bec84812187c33fa2d674d7c9c0383b7eb04dd27b6552ba3220c396e297fb0c37f415f107f7c4c20cde42a1dc02fbd206f0468c3cbc93bfd39b11cbb414ceaf2e1d1bff494caf3f3850b6a4d3d"], 0x2c}}, 0x0) 23:20:25 executing program 0: r0 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @broadcast}, {}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @random}]}) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r1, &(0x7f00000000c0)={0x1a, 0x20, 0x0, 0x9, 0x0, 0x0, @multicast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f00000018c0)=ANY=[@ANYRES32=r2, @ANYBLOB="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"]) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) getsockname(r2, &(0x7f0000000200)=@rc={0x1f, @fixed}, &(0x7f0000000280)=0x80) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendto$llc(r3, &(0x7f0000000100)="b7da049f08416e434cc3460b57ed95fa0e7a0e7faf3b569039e3c1f644742badfd1b6be71c1e32d06f89b44cf0d8584e16a2bc059bc71d0beb274a8ebfaa7c093be47e7d8435f4b8e983f80b8e6c93364d3f2aa5fd5dd6b7211f33ede4ebedee812c327bb9e394fa04f2c305f1cf5e96269d62e0afdf592dd40c2dfd96e21295f3a6725f187d92f9a89f4cf8344188be16eb4216f85f7fd0c310707baea8b59e32d5f0d930cae50a0438a62b1c9fd5956bf38ad8ae4128bb67", 0xb9, 0x4054, &(0x7f00000001c0)={0x1a, 0x8, 0x48, 0x1, 0xfb, 0x9, @broadcast}, 0x10) 23:20:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000100)={0x0, 0x0, @ioapic}) 23:20:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x6}, 0x6) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 23:20:25 executing program 3: getpeername$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000008914aae085c8af38e4bc7e02c55ab807cacbad88c50b3d468df9725caab71e5985f2cb4867e13cc7b7d55d960096cf241b874c1e5275d4e5d3ab7bf915aa9dc7c8431b955d731b4bae92061cf1a94cd1fbea914d59234fe0d9e3c732d763e746c08b6873022cb946e05e38d3b27ca8464fce8633218a8baed66b07703f8483b4e1b918fae167cf57df52f22c0c1dfc141bc4a259dfef29de4de391e31054b2bf47d83f1d0b7ef984fe842852c718686847c5bed84a3f23fdc6b62c16f16421b27d1e"], 0x2c}}, 0x0) 23:20:25 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)=@buf={0xbe, &(0x7f0000000100)="6f8af1f6fe561d84538e0771d2a413efbc49f57c0fb1380f39a4fd6a68c70d952ed08472ebd27165b124f01c47de82f998dc53fe2ea0fc45b38181465bde152ed047688eb967582d0b89c314e647c0c8dc6c773b1e8ea25981e8d8946f8871e6e0a67ebff858331d270d6561a300f76909679b322839148dc9ce6b0576356651c8d7eb3636aacf078002ffc7d0900e38f553f8b067312daa45911977d28d4c64b3b80cf569209a7c4aa2a0831cfdbada5932a5d6ecef54357173141df0d3"}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 23:20:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x50, r1, 0x2, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe0e}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x72b}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000}, 0x8000) 23:20:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780220147452e7c210078c76c743390fb770109eca52d78d692b2aeeb9fd40959dcd42280e799592c184c01b2a1665681ba2a00"/92], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000080)={0xff, 'syz0\x00'}) 23:20:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x34}}, 0x14040000) 23:20:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@delnexthop={0x40, 0x69, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000010) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) bind$isdn(r2, &(0x7f0000000040)={0x22, 0xb7, 0x2d, 0x95, 0xfb}, 0x6) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) 23:20:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRESDEC=r1, @ANYRESOCT=r2, @ANYRESHEX=r0, @ANYRESHEX=r2, @ANYRESOCT=r1, @ANYRESHEX=r2], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x3, [0x3, 0x800], 0x2}, 0x10) socketpair(0x22, 0x0, 0x5, &(0x7f0000000080)) r3 = accept(r0, &(0x7f0000000180)=@xdp, &(0x7f0000000100)=0x80) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000b00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x7ec, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xec, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x295}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x967}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x590}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7b}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400000}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "42f61ff05f45943267f770bd448e853d8ff7746986389938e830"}}]}, @TIPC_NLA_NODE={0x1f0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x84, 0x3, "62675eda24270e175bc6eea09427e8851e4e005710c0b5e4615c10e30872f3cab73f2862b507584a55c7afc59d4f6619691258441eab698a5b11aa84b7f739ee2caefba0dccda2e4dc243e945fecf11f9614631e1ccfe92e674ec1423b815dac1f52ed19cc20d821832e59fd1862190c121baa53efb44bffc515d34b2c9babff"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xde, 0x3, "9a75c3d496bc3783075622366ff57001cc0f7282319e577cafc1eb9cbadb7485338abaf642a7f5d3c0e4044ee58c3d8154af2d95603853aaa4d7b6f0f6d51febd027edf0352d746a5d601beeea1ffb63363117ee8caba74b803d02e63ebb48ed8605a204e60072b57f376480aa6be5dcf5db0b2c5d30089e849d3af8dfe2b23f349e5a6391633d799d64fad93c3bc5ea31d41e918b4653f17f97aee14161d9ee41101b341dc8e1ceafe32dd4236ded3ec59dd84585c54d7730302e8f2cc0ed889c6536ab42a2a8ec8d3114d78fa9a03fdafc5f7a62899e355879"}, @TIPC_NLA_NODE_ID={0x82, 0x3, "26af003c6fda64b82d2d830ee6d70fb66b3858ba17494d5bbbf5a67d709dba47000e191063734853c1d137eaac300ebc84c9896290bba3be8a6d67cf57477c9e8f3fe68f1f5d60f13e93c0ae5de43ccbe3c0d978503df9b5e1117971caf91c38a82eb904dd62b99acd4ddb2258d6f5aeeb55fc3e85796dc729180e40159a"}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa579}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xcf}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x278, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "48708b3c4c65ca222038f3c51bb1b00c236a8a6c787b61"}}, @TIPC_NLA_NODE_ID={0xbf, 0x3, "23d3173b8eb12078632c7772fb2a4e9a0ae22e3c16e1cb85be36d826fb4f4a1d9c72defd82a53cb0d93a3f89f0751b1ef88f5a3db37833a2870c7b6843178755cc31597abd80580147956335f57ec9168b1a6f9c45f1a6f4cfab19f6991e1c2136cda0a08d25850946a03f503e4ca6b7aaea3afdf4ca273061d39829f3d57d78167df117b89a7d6ab4f0de470b7d3d04c9806af70d1ec22764e530ec0c05d00cae18a9adfc78cd13e2f157ad4c6efcc6161067d73daaea3e70ffe7"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "c6fcb8242951b7f24190fd3b17fb893559ad10bb4e9e7b87e3851ba6"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "d76ce3e281899209abc8f673c421e9dc79461bac339aa9bdbe38e958"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "48a593fb1ab1d2be6c38cd369ae62b568f813b3fe90623856b85837cf2c3c62fe833ab06"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "a0eaf87ac72db5291b6f9ce1d31b6508701a1c5a759f99708e480f951961db1f"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "72a1792fac41f63d8c0ac9982c34c1f15f581c0c9286d3664995262ddbb7d166ef6f9df2"}}]}, @TIPC_NLA_BEARER={0x11c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3978}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4f3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xe019, @local, 0x54558}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}}}}}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x7ec}, 0x1, 0x0, 0x0, 0x8000}, 0x44) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x0, 0x2000}) 23:20:25 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xea0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) getpgrp(0xffffffffffffffff) r2 = getpgid(0x0) ptrace$getsig(0x4202, r2, 0x0, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/pid_for_children\x00') 23:20:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[], 0x1c}}, 0x0) 23:20:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0200000011007d", @ANYRESHEX], 0x2c}}, 0x0) 23:20:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x100, 0x20480) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x68, 0x5, 0x0, 0x0, @adapter={0x1000, 0x5, 0x2, 0x3}}, {0xff, 0x3, 0x0, 0x0, @sint={0x0, 0xbae7}}, {0x5c7f, 0x3, 0x0, 0x0, @irqchip={0x2, 0x7}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x5, 0x2, 0x3f, 0x83d1, 0xaf}}, {0x0, 0x3, 0x0, 0x0, @msi={0xffff, 0x4, 0x2, 0x8001}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x4ff9, 0x7f, 0x93, 0x7fff, 0x400}}, {0xaf, 0x2, 0x0, 0x0, @msi={0x2, 0x49e, 0xfca, 0x1b8c}}, {0x988, 0x3, 0x0, 0x0, @sint={0x3, 0xb2a}}, {0x8, 0x4, 0x0, 0x0, @msi={0xe14a, 0x9, 0x0, 0x8}}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 23:20:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="940e87c600a289c356a15db3d193e9741988e8f139f11cb2c317b38c1cddddf8235e78491f1e71bb178acc126c7ad2c38557397a8f46898fe7477738b810123362516d255c2ad98b51192d5a73935da5671a8dbb6f902f9973b7945ab42a831506c769fb772e4aecb22c7b03515bf59821070a3bfd04635cf96a63479aaa671a9e09497af5ee3cd0b6b692884091bb9872e5a80c074758950d0bf7c17386497daac70062d493dffa0dd91627fd1225dfbbbfab1206c7d87e4dc80c4522a08606cdbac17bd1bebae53f01fee2273d43804caa5a5aa88bb8544e97d99134ff355eac390f589a02f051039059f1f9e5a91ec027184e26dc656603650976c285a6481473"], 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x250, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5a9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xde4ae10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x96}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x89}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3189d80b}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x20, 0x3, "5e84a6e8f1c0d897971bd95e2d0bc6fef2a8c529793be41b7925d68b"}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3523}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x30f6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x66d}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x58f3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x591}]}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x4}, 0x4040) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000580)={@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x3, 0x0, 0x2, 0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4}}}, {&(0x7f0000000200)=""/87, 0x57}, &(0x7f0000000540), 0x22}, 0xa0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x20}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4890}, 0x4445) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000000)={r1, 0xffffffff, 0x0, "82e18147cc2ccb8f401e6e1569fb7416fb7ef90a5a839ad0a265caaf1cdce74cbd1450639898cd411b323609839f26c9aed99f0b302d3db042ebe846c5b35b0abb053a7ee9800a1d179e897b0c60d04abb48e0eae03553abdb29fcd33468542130dd143917ab8c3a991de9c557f2144b555d688cb9f2af227dd51356631ccf0743d30031f95ffa1799b0a195f03d766dcca82e9593b779ee3ec0f9b2c369"}) 23:20:26 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0x3, 0x7f, 0x8, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000080)={0x967e, 0x800, 0x2, @broadcast, 'ip6gre0\x00'}) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$rds(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 23:20:26 executing program 2: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) socketpair(0x18, 0x5, 0x6, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000100)=0x53d4, 0x4) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 2', 0x1b) 23:20:26 executing program 0: socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000000)={0x2, 0x0, 0x7, 0x8, 0x3}) 23:20:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @broadcast}]}) 23:20:26 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000100)={0x1, "95"}, 0x2) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000000c0)={{0x0, 0x6}}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) accept(r0, 0x0, &(0x7f0000000000)) 23:20:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) getsockopt$netlink(r4, 0x10e, 0x1, &(0x7f00000002c0)=""/1, &(0x7f0000000300)=0x1) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcd}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x38}}, 0x20000010) r5 = socket$netlink(0x10, 0x3, 0x1) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x1}, 0x14}}, 0x0) r8 = accept(r0, &(0x7f0000000500)=@alg, &(0x7f0000000580)=0x80) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r9, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_DEBUG={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) r10 = syz_open_dev$audion(&(0x7f0000000340), 0x80000001, 0x101) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r7) sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2040201}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r11, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x80}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x85}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008085}, 0x20000004) 23:20:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000000000)=""/35, &(0x7f0000000040)=0x23) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3ff, 0xc0002) connect$netlink(r0, &(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f0000000100)=""/37, 0x25}, &(0x7f0000000180), 0x50}, 0x20) r3 = syz_open_dev$audion(&(0x7f0000000580), 0x0, 0x10000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r3, 0x7a9, &(0x7f0000000200)={{@hyper, 0x1d}, 0x0, 0x9, 0x7, 0x7, 0x2, 0x1c4, 0x3, 0x318f}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000b42c633154419803eb935316e2a46f09546f2c9cf7e9afbdbe4a0b6ec6aa8fa4b392bc856b4b636a6569a8ddc8a5c4632e7601e5b401b5e5984df50dc176a721fbd214b35ca297d145139f2b49483739ee532602d69571c2"], 0x2c}}, 0x4000) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x1) 23:20:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4c001) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x1abd, 0x400) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r2) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00|', @ANYRES16=r3, @ANYBLOB="000327bd7000fcdbdf25010000000500060001000000060003000100000014002000fe800000000000000000000000000011050006000900000014001f00fc01000000000000000000000000000108000b000400000006001d00030000000500210001000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4810}, 0x4000) 23:20:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf0, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x808}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6gretap0\x00'}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x428d}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x11}, 0x20008800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x7) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x208, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd9d8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1165}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7b8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x895}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x59a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfa5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x440d4}, 0x800) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@delnexthop={0x68, 0x69, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{0x8, 0x1, 0x1}, {0x8}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0xc44}, 0x8084) 23:20:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) r1 = accept(r0, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) ioctl$sock_ifreq(r2, 0x8938, &(0x7f0000000340)={'veth0_to_bridge\x00', @ifru_flags}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x5, 0x2, 0x38, @private2, @empty, 0x8, 0x717, 0x0, 0x5f}}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@ipv6_deladdrlabel={0x1c, 0x49, 0x200, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x1f, 0x0, r3, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x40800) r4 = socket$nl_crypto(0x10, 0x3, 0x15) r5 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r5, 0x4008ae48, &(0x7f0000000380)=0x1) getsockname(r4, &(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @private0}, &(0x7f00000001c0)=0x80) r6 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7ab, &(0x7f0000000780)={&(0x7f0000000840)={{@any, 0x8000}, {@any, 0x10000}, 0x400, "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"}, 0x418, 0x3}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f00000006c0)={@ax25={{0x3, @default, 0x2}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, {&(0x7f00000005c0)=""/187, 0xbb}, &(0x7f0000000680), 0x4}, 0xa0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r5) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r8, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4008041) [ 3215.286605] RDS: rds_bind could not find a transport for 224.0.0.2, load rds_tcp or rds_rdma? 23:20:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0xdc) 23:20:26 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="30020000", @ANYRES16=r0, @ANYBLOB="100029bd7000fbdbdf2505000000800005800800010065746800070001006962000008000100756470000c000280080002000e1100002c000280080001000900000008000100090000000800010007000000480001001300000008000300c70000002c000280080001001c000000080001001700000008000400ff0f0000080001000300000008000200fffffffff40004802c000780080002000700000008000200060000000800040002000000080004000000000008000300020000000900010073797a30000000000900010073797a30000000000900010073797a31000000000900010073797a30000000003c00010408000300040000000800030009000000080004000008000008000300070000000800030000000070080004000400000008000100060000001300010062726f6164636173742d6c696e6b0000440007800800040001000100080003000000000008000200830c00000800040000000000080004000300000008000300000100000800040002000000080001000f0000004400028004000400040004000800010004000000080002000000010004000400080002000000f80008000200000001000800020000040000040004000800020000000000540006804500040067636d28616573290000000000000000000000000000000000000000000000001d000000642b8100000000000000da316a64c8da8291cb4a7174357885f015b8b00000000800010007000000100007800c000300a134000000000000"], 0x230}, 0x1, 0x0, 0x0, 0x4048805}, 0x4002) r2 = accept(r1, &(0x7f00000004c0)=@can, &(0x7f0000000540)=0x80) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000600)={0x264, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x22}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8406}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x546a0476}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x138, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0xf1, 0x3, "e67bd5c55dab55e1e6925d9010839c2dbee502c26e537255275ce033045bef04a89caaf867b99a974db2de6382a5a6b1f931e3da7344b270b7a45c065c60f0ce6ec78bd0d0feabf28530068391e79df957a498cfc6342c484d2681b05f200c938944850f1300ae0c07c176620143592fb6fde56e3b3bd211cc81b8405a4aa22f195be83cb27bb4de2e1b24891e1d0112a9d3bf2cacad16876adb2938301e7b472f9796b613cfaca37aa45339f356ee20bafb9f656c8ca3573648c7e49a58b11827be6e3922a8a04998793008545c6222cd7cf423c72ea9e3c04a445bb545df543a223d069e8f3dc175a9a7e0c6"}, @TIPC_NLA_NODE_ID={0x15, 0x3, "fdb7bc3018ec645ab94e2b7ac4ff98f1b3"}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7b1}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xaa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x4800}, 0x515ef1d88ff89a0e) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x201, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x40040) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r6, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r7 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) 23:20:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="174000006e6d42"], 0x2c}}, 0x0) 23:20:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, r2, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb21}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008000}, 0x2) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRES16=r1], 0x2c}}, 0x0) r3 = accept(r0, &(0x7f0000000040)=@alg, &(0x7f0000000100)=0x80) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) 23:20:26 executing program 3: sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, &(0x7f0000000000)=""/20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d52d084415d24a382637edc29537534f24e12ed29bd9613eeab793cd55afc884ec0b4e46303bd2d0653e96aa00271bc5e390ae22a740695dccdc08bac805e25625ac958faf3ed816d6a393b70b6db4cfe95fdc28276fefe6fb03ac8cb76f96dbd3bf2437a35de22345fcdb86c91a395c9961eacb724447c5ad5994331f4bd2d884dc8981910887a499eb25ea34a6316ad5e86c9f3feb579577111e5a98387832f7815207a58a6bfc1db08771411b4a0e873b2b58289505871519d8df9"], 0x2c}}, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc) 23:20:26 executing program 0: r0 = fork() getpgrp(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x4) 23:20:26 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 23:20:26 executing program 4: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000040)={0x7ff, 'syz0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) 23:20:26 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0xb) 23:20:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x5, 0x7, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x7, 0x40, 0x4, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', r1, 0x10, 0x1, 0x2, 0x0, {{0x43, 0x4, 0x1, 0x2, 0x10c, 0x67, 0x0, 0x3, 0x29, 0x0, @broadcast, @multicast2, {[@cipso={0x86, 0x87, 0x1, [{0x2, 0xf, "2cd5700aa289f520c7034b87a6"}, {0x0, 0xf, "9a05c16d1bdc93c0e097ae5c46"}, {0x7, 0x9, "9b05247cd3a81c"}, {0x1, 0x2}, {0x7, 0x10, "c06e3c966d68926f1c9f6c78850a"}, {0x6, 0xc, "31948e8fb71a779f2a14"}, {0x7, 0xb, "a2758889e45ff6e7ed"}, {0x0, 0x11, "8910b784b914f6214e8fda5f6852ec"}, {0x2, 0xe, "90e3f1686ddb3c3493b607b3"}, {0x6, 0x12, "c9152536e226dfd962672e5b0f072769"}]}, @lsrr={0x83, 0xf, 0x69, [@remote, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @end, @generic={0x89, 0xe, "28c3feab209006b6dec978db"}, @lsrr={0x83, 0x3, 0x24}, @generic={0x88, 0x11, "a29a352d4768574916ec70b2b4602f"}, @cipso={0x86, 0x2d, 0xfffffffffffffffc, [{0x2, 0x4, "80e1"}, {0x5, 0x2}, {0x2, 0x4, "1d6c"}, {0x5, 0x6, "99e4a267"}, {0x7, 0x12, "3a37e366ce26591d76a79f9c950dbe0f"}, {0x5, 0x5, "18e5ff"}]}, @rr={0x7, 0xf, 0xdd, [@multicast2, @private=0xa010102, @local]}]}}}}}) 23:20:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15010000004d84f780"], 0x1c}}, 0x54) 23:20:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x8008040) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f00000004c0)={&(0x7f0000000080)={{@hyper, 0x36f}, {@my=0x0, 0x7fff}, 0x400, "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"}, 0x418, 0x7}) 23:20:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x94, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x397e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff00}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x18c0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffc1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x84}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 23:20:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00002015007d", @ANYRESHEX], 0x2c}}, 0x0) socket$isdn(0x22, 0x3, 0x25) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000001c0)="0fc76ff9f30fc7b180f30fc76bc966b90203000066b84f33af2266ba000000000f300f2e61b40f0171002e0f01c3f00fb3680f64660feb7c9bf30fe68cceb7", 0x3f}], 0x1, 0xfef880bf5ccff960, &(0x7f0000000180)=[@dstype0={0x6, 0x3}], 0x1) 23:20:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept(r0, &(0x7f0000000000)=@in={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x80) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000180)={r1, 0x6, 0xff, "f6654653ec16416225bd181b31dba0153bed010eea729efcc5fe3ec94ece0ca5891c1b9ead1559e87925c228700f7a5d997a1b1362be6ce60d3747a7ce68f437c4e68b41ce82f126eeb811"}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1728d1007e001000fa0000002a8e0400000000"], 0x2c}}, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000200)=0x4, 0x4) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000240)={0x80, 'syz0\x00'}) 23:20:26 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000e40)={0x117c, 0x0, 0x400, 0x5, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x1064, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xc, 0x3, "75172c920c5f5db5"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_ID={0x29, 0x3, "ece771f2ecf330b82a55975f0347b61c9e9c7e7574724d7954740c7cc40ec3b58346424d13"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x9, 0x3, "a76cd8696b"}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1800000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0x117c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r0, 0x7b3, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000080)={0x160, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbfea}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff0000}]}, @TIPC_NLA_LINK={0x12c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe2b6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd02}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff7fff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd51}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb69}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd40}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x160}}, 0x40) 23:20:26 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000180)={@in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x1ad00000}, {&(0x7f0000000100)}, &(0x7f0000000140), 0x1a}, 0xa0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000080)={0x100000, 0x110000}) r2 = syz_open_dev$audion(&(0x7f0000000100), 0xfffffffffffffff7, 0x100) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000240)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000000)={0x80000001, 0x9}) 23:20:26 executing program 3: socket$nl_route(0x10, 0x3, 0x0) 23:20:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newnexthop={0x48, 0x68, 0x1, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x32}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_BLACKHOLE={0x4}, @NHA_GROUP_TYPE={0x6}, @NHA_FDB={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x0) 23:20:26 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000), 0x4) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10) 23:20:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d2f15c38872c00", @ANYRESHEX], 0x2c}}, 0x0) 23:20:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x1c}}, 0x0) 23:20:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x50004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r4, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000011}, 0x88000) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x7289) r5 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) bind$llc(r5, &(0x7f0000000100)={0x1a, 0x104, 0x40, 0x9, 0xff, 0x9, @multicast}, 0x10) 23:20:26 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000140)=0x33, 0x8) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001e40)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x80) r3 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000100)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4010) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xc}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010101}, @L2TP_ATTR_DEBUG={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) 23:20:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000040)={0x401, 0x1ff}) 23:20:26 executing program 5: setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x46) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0xe21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 23:20:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@dev, @in6=@mcast2}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{0xa60, 0x800, 0x2, 0x79, 0x8c, 0x3, 0x4, 0x19, 0x1f, 0x4, 0x3, 0x5, 0x8c}, {0xe413, 0xe8, 0x7, 0x5, 0x5, 0x1f, 0x5, 0x81, 0x72, 0x2f, 0x1f, 0x20, 0x1}, {0x40, 0x2, 0x3f, 0xff, 0x1, 0x7f, 0xcc, 0x2, 0x3, 0x40, 0x8, 0x7f, 0x7fffffff}], 0x80000001}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) 23:20:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x2c}}, 0x0) 23:20:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES32=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40088b0) 23:20:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x9c, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x4100) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x0) 23:20:27 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4620, @empty}, 0x10) 23:20:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_getnetconf={0x1c, 0x52, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x20040854) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) connect$netlink(r1, &(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfc, 0x20001284}, 0xc) 23:20:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) 23:20:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000100)={0x3f, 0x0, 0x7, 0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000010007d1bbdfcccfd145d69e20ac98dc93bdb0ad212f5b7ac3f8fee90e12c6e881dbd49b50c7ebf2128949eb6598203c2f2d2814863d47169b8e2bfe9f1614f75ec161f596e5741bf3992704197de09600bc3bef9c1b7600e61a3233fa71050a84614496643004902d5f8eaad08752dae3a32727d6f5d0bd594eb2d33574a433fba2c76a82dd15b581bb83f8b72057017d03af391ae5debb503"], 0x2c}}, 0x0) 23:20:27 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = syz_open_dev$audion(&(0x7f0000000000), 0xc19, 0x8500) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffeff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x7f, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x73b7238a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x240448c0}, 0x8000) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 23:20:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)=0x9) 23:20:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22400, 0x0) getpgid(0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b7911f2ead9bd3118a071c0800002000860500f780fc2baa1a9530697b78508ccff6014d7dc58e62f6624453277358df9208a94b442784962aa285c7e68766e98e129feb846142631bf70d5c5bd835ac367b4de81cd99f1288a80840e91090981b2d2d0ea380ba0066f6c2f7fad6ea551b7f3cf520844ffdf207304ce0815234196fa46fc4"], 0x1c}}, 0x0) 23:20:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRESHEX], 0x2c}}, 0x0) 23:20:27 executing program 3: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20080080}, 0x20048014) r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)={'a', ' *:* ', 'rm\x00'}, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x28) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) 23:20:27 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = accept(r0, 0x0, &(0x7f0000000080)) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000100), 0x4) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000000)=0x53, 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 23:20:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x2c}}, 0x0) getsockname(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x80) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0xd22, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x2) 23:20:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="54020000", @ANYRES16=0x0, @ANYBLOB="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"/724], 0x254}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) 23:20:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000010007db78002672e27283a21f37c613b70613473e630fd8cc9d82306e6c5ea1219513a2e17609158ea68e9c4ee2473b99d6ff77b5d3efc41a99e5d6772deed93b98d918ead155c5c2824ed09d2cd9e298e18995ecda0b6c8bcd4bc91b2467994c791e96c8cddd08c119120b603e05fa3ec2f507aa7f528e9c162a3126d6ec8c64a9224111c78ed87bf21b9bde898d5"], 0x2c}}, 0x0) 23:20:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x4, 0x7, 0xffffffff, 0x7}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYRESHEX], 0x2c}}, 0x0) 23:20:27 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0xffff, @remote}, 0x10) 23:20:27 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) 23:20:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780", @ANYRES32=r0], 0x1c}}, 0x0) 23:20:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00a9bf11007d", @ANYRESHEX], 0x2c}}, 0x0) 23:20:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x0) 23:20:27 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0x10, 0x4) r1 = socket$isdn(0x22, 0x3, 0x25) getsockname(r1, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000200)=0x2, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f00000001c0)=0x28a, 0x4) 23:20:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xe) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="fa4bb73abd5707441bf70a0f6b9d58d3e38606aa1bcceb42866f0300d70e27a1a6370d7d759d915cd8f25f39763741ea8ee93eef22ff034a09d65fa10f0276ba200fac65e44fcac7cfc9c9a6f0cf8112f2f188ea5208af917ed0e329c77eb6687f09ff74059e1f17d161198e7922ce11", @ANYRES16=0x0, @ANYBLOB="20002bbd700036a0fe800000000000000000b1ea97084092c8a2aa85232f0db90e000000002406000300070000000600010005000000144020000040656522fccb95000000000000000000ffff64010100060003000050000006000100040000001400080076657468315f746f5f6272696467650006001b004e24000008"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x228, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x70, 0x1, @l2={'eth', 0x3a, 'netpci0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x80, @initdev={0xfe, 0x88, '\x00', 0x6, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x800, @private1, 0x7fffffff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x0, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x98, @loopback, 0x101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000001, @mcast1}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x208}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c11}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x0, 0x4, {{0x0, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}, {0x0, 0x2, @in6={0xa, 0x4e21, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x16}, 0x7ff}}}}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x80}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8001}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r6, 0x4010ae74, &(0x7f0000000000)={0x3, 0x6, 0x5}) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000500), 0x4) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 23:20:27 executing program 0: socketpair(0x18, 0x800, 0x8be, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x7, 0x4) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000140)={{@any, 0x1}, @host, 0xc, 0x82, 0x2, 0x100000001, 0x808000000000, 0x30d0, 0x7}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000000)={0x2, "d931"}, 0x3) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0xffffffffffffffff, 0x101, "2992f4", 0x3, 0x2}) 23:20:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4885c8e654d252bf441580b402f72aa2ade3ff0fc5a134b39a433ea031a24a42438a6581a1f8f688939f31a584704884291801be68b702c5b060a4af3def1fa599a20e71122258564d80c0bb8077532d1e136585001366fb56217ea510791f6a0918e624885e80e1b27d030000000000000067fe597ee7faf1fa6c038e2edb7ef9fa71f1e1a0ec5cae4cf92776280637156cd54f72499b11a444aa658edfa5637b8a3ce1eb9806da27de41bb795cff37d6d57635a4a061", @ANYRESHEX], 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}]}, @TIPC_NLA_LINK={0x4}]}, 0x28}}, 0x20000001) 23:20:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x1, 0x103101) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x78, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4880) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f0000000240), 0x4) 23:20:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair(0x27, 0x2, 0xff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000024c0)={'syztnl0\x00', 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf25050000000c001600070000000000000006001b004e200000140020002001000000000000000000000000000005000d000100000014002000ff01000000000000000000000000000108001700", @ANYRES32=r3, @ANYBLOB="050007000300000014002000000000000000000000000000000000000c0010000400000000000000"], 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x80, 0x7, 0x2, 0x1, {{0x17, 0x4, 0x2, 0x0, 0x5c, 0x66, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @rand_addr=0x64010102, {[@cipso={0x86, 0x12, 0x3, [{0x7, 0x5, "e7e778"}, {0x2, 0x7, "b6618b357c"}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x1f, 0x0, [{0x5, 0x8, "966c852653c7"}, {0x2, 0x11, "7c1a6308cc9139e7792353a4d45bdc"}]}, @rr={0x7, 0xf, 0x9f, [@loopback, @private=0xa010102, @multicast2]}, @generic={0x89, 0x3, "18"}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) 23:20:27 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="59f30fe08051b367128a33d2677d639961aaae0f35180000", @ANYRES16=0x0, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x4040}, 0x810) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x400c014) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x1fe, 0x0, &(0x7f0000ffb000/0x3000)=nil}) 23:20:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8124}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000045}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) 23:20:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0042cdf3a5700000e13cf1c538ae71c705fb957a8b8801040000c5e7527b11004d864d84f780", @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x88004}, 0x0) 23:20:27 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x8, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000002c0)={@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @multicast2}, 0x0, 0x1, 0x4, 0x1}}, {&(0x7f0000000100)=""/105, 0x69}, &(0x7f0000000280), 0x10}, 0xa0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="44cb3ac01f931c77d8ab6eecbc6347797beadebd12077882", @ANYRES16=r3, @ANYBLOB="00022bbd7000fbdbdf250c000000400005802c0002800800030002000000080002000700000008000200010000000800020009000000080002000002000007000100696200000700010069620000"], 0x54}, 0x1, 0x0, 0x0, 0x20004834}, 0x8080) 23:20:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002000ed5c33010dc35e11956ca4d639dc15cbfd4d372feb48864d84f7"], 0x1c}}, 0x0) 23:20:27 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 23:20:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f00000001c0)=0x2000, 0x4) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRES16=0x0, @ANYBLOB="000129bd7000fbdbdf25020000000400068030000280080002000200000008000100ff010000080002000300000008000200ffff00000800020008000000040004006400028004000400540003800800010004000000080002002000000008000200050000000800010008000000080001001f0000000800020000100000080002000900000008000200ff0f0000080001000200000008000200ffffffff080002006c000000480007800c00040001000000000000000c000300000001000000000008000200ff7f00000c00040081000000000000000c000300ffffffff000000000c000300000000000000000004000380"], 0xf8}}, 0x20000800) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2ceb0600000000", @ANYRESHEX], 0x2c}}, 0x0) 23:20:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x2f8, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1259}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x50}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa05}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xee8}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2997}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x42f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x82}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa0000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd0dd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4000}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}]}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x796f932a1ce2b265}, 0x20040014) 23:20:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES16], 0x2c}}, 0x0) 23:20:28 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x2, 0x7, 0x20, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x8000, 0x2, 0x100}}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, @can, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4}, @xdp={0x2c, 0x0, r1}, 0x8f2, 0x0, 0x0, 0x0, 0xfc01, &(0x7f0000000080)='batadv0\x00', 0x3, 0x1, 0x8}) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 23:20:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="06000000000000007f7a24e677e363e7e0add41b4e000076af8d26b9", @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES16=r2, @ANYRES32=r0, @ANYRES16=r1], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 23:20:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="432b1a9442cb4da43271f7015d0a442db2e85ed5af5e68cc7dc73f4e05986fbbbf5d4e1c02458143db496175a18d2c1c97f646408b4eb5b7e4fb7d929bee2fb4dd6c05f4139b0d4fd620945f0ed1019b2f45e420b4e2d64ae735487255cd3d4c6a44386e95c05e0a47ff513d0ce5cde1594cdc9e7a8b72a03b354389f70e8da41190663212676ad5502a4e4e2394378c56a814f817baed29cf223f94c84838ce81691298b6d953", @ANYRES64, @ANYRES16=r2, @ANYBLOB, @ANYRESOCT=r2], 0x2c}}, 0x0) r3 = eventfd(0xff) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x2, &(0x7f0000000000), 0x8, r3, 0x8}) 23:20:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000780)={0x1, 0x4, 0x81, 0x5dca}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="400cf5ff", @ANYRES16=r1, @ANYBLOB="20002abd7000ffdbdf250100000014001f00fc02000000000000000000000000000105000d000000000008000b000300000005000d000000000008001800ac1e0101"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)={0x64, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe0000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x29b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x45}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}]}, 0x64}}, 0x2000c004) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000241}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x28c, r3, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe61}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbd}]}, @TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x87, 0x3, "919088a61c09fa5c8ecb4d8d7dcab99719cf7ec7cbe1a2faea0746dd8275918d2eca5c4f5bdb25ba30536fefba8bd10f8157d0dcc40e61945d40df91dc7e95ce45cc47d8f373ce71f219050d8f11f0b852b55a27989abbb881a9bbcbd5f4628a19ff52ddf2efe2196433d95168b08395e7c9afda6e042b71fbf215ced27f06ca6d2578"}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "b708a4ea6840ac9b49b209330f48ae2a4ac2cf5c8776c3a573263c4dd403d0af"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xdb4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x764e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff0000}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4040004}, 0x16ea96546565e98a) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x0, @nfc={0x27, 0x0, 0x2, 0x6}, @can, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xea8, 0x0, 0x0, 0x0, 0x54, &(0x7f0000000180)='batadv0\x00', 0xffffffff, 0x3, 0xee16}) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f7a0"], 0x1c}}, 0x0) 23:20:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000), 0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) 23:20:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x4, 0x410001) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x8000, 0x80, 0x80, 0x1, {{0xb, 0x4, 0x1, 0x17, 0x2c, 0x66, 0x0, 0x1f, 0x2f, 0x0, @remote, @multicast1, {[@ssrr={0x89, 0x7, 0x56, [@loopback]}, @end, @lsrr={0x83, 0xf, 0xe5, [@remote, @empty, @empty]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getnexthop={0x34, 0x6a, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004001}, 0x884) 23:20:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c18000011007d", @ANYRESHEX], 0x2c}}, 0x0) 23:20:28 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf2505000005002200"], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0xc815) 23:20:28 executing program 0: r0 = getpid() ptrace$getsig(0x4202, r0, 0x569a, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) 23:20:28 executing program 2: setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x44051}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x40, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x41f}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40) 23:20:28 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x1f8, 0x84081) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$IMSETDEVNAME(r3, 0x80184947, &(0x7f0000000000)={0x8, 'syz1\x00'}) 23:20:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000140)=0x80) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000180)={0x4, [0xcf, 0x7c], 0x2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) 23:20:28 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 23:20:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) 23:20:28 executing program 4: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x3, 0x40, "58d9d9", 0x4c, 0x58}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRESHEX], 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 23:20:28 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x410201) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x0) 23:20:28 executing program 0: write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1ce2bf00200039dc15cbfd4d864d84f780dc22416382c2d290962f7c36a5e1f8466a0d720fbfb0"], 0x1c}}, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000080)=""/16) 23:20:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000011007d68e3f6ff9bba62bd3fb5c5125aeb50c62d70380afadc0e408902dc0d6151ec96880b98d31ead57f1b5adc60baa1d5a9b61", @ANYRESHEX], 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x0) 23:20:28 executing program 5: getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 23:20:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x188, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "60400283d2eeb29ebbd4d2152683b66e98aa5e3a90"}}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @mcast1, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd26e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5000000}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r3, 0x100, 0x8}, 0xc) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000400)=0x3) 23:20:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) 23:20:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000010007d47b7375dd9a430fb6b0cdfc912dcfaf34998cb178be20476eded29df89df202929f5132fb10503a086df165878f20b3d3094f989abb3a68d301d18651efee66f9f9b6de3f1d229f55476dc055911f06510b1245457bb9abd5a160fe8a13f0a763b5a6604b1c940a4e69ba681e601de2b8a56b5401068e82d6072f3e7af0e3fffff5992073874a6ddcc2e3329d83db891dd74983b61644fabe929a383ec1344a672953bfd0ef0f6df3cff67e5cf723496813f105c7e"], 0x2c}}, 0x0) 23:20:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC], 0x1c}}, 0x4040884) 23:20:28 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$rds(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000080)=""/114, 0xffffffe3}, {&(0x7f0000000100)=""/165, 0xa5}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000200)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000000000), &(0x7f0000000040)}}, @zcopy_cookie={0x18}, @zcopy_cookie={0x18}, @rdma_dest={0x18}], 0xa0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000040)=@buf={0x1000, &(0x7f0000000180)="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"}) r3 = socket$inet(0x2, 0x6, 0x6c07323c) r4 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$bt_hci(r4, &(0x7f0000000100)={0x1, @read_enc_key_size={{0x1408, 0x2}, {0xc9}}}, 0x6) ioctl$sock_ifreq(r3, 0x8931, &(0x7f0000000080)={'veth0_virt_wifi\x00', @ifru_hwaddr=@local}) 23:20:28 executing program 5: sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="e00c0000", @ANYRES16=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x240288d0}, 0x8000) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0xfffffffffffffffb, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0xea02f922bd3effbe, 0x20, 0x4, 0x7, 0x101, r1, 0x7f, '\x00', 0x0, r2, 0x2, 0x3, 0x3}, 0x40) 23:20:28 executing program 2: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000340)) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000380)={r0, 0x8001, 0xa6, "ac2796fd1d9e3eb0c4f4872236bde43d58170973696466ca0c9b97e7f135307f3208991a89a6ff60379e57a1c60bce7e2dabfd8b"}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000011007d"], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x16, 0x6, 0x20, 0x77, 0x220, 0x1, 0xf0de, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2400, 0x1002}, [@IFLA_LINKMODE={0x5, 0x11, 0xff}, @IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x12}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x7}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @loopback}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000041) 23:20:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000010007dc0831e79282e6719cf2e58f732e526f02b3e3677b04f"], 0x2c}}, 0x0) 23:20:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000000)={{@any, 0x984}, 0x400, 0x2, 0x4, 0x8}) 23:20:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002000f780"], 0x1c}}, 0x0) 23:20:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001340)=ANY=[@ANYBLOB="14000000420001002abd7b806276f061b4"], 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x144, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x14}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x41cbc9a0}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4cbe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}]}, 0x144}}, 0x0) 23:20:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) 23:20:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18c, 0x0, 0x20b, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x178, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "7f216d36af5446f1b1300e79a1673d712aab84cee5180337c7a11f"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "708b65153114fd712a8c7f45e817dc8627e41d018e41a5ac19c88d8863"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9ab}, @TIPC_NLA_NODE_ID={0x88, 0x3, "a7e94f0d96012bd0e6d481d0108fef801d3aff7ac812bbf80cba0ee1f902367eefcaf784365819b4e0243a32ae5f85544fd98e156217a23754e4c2116283fa3d88104ac8d954af0c5a71bca1eb558e9fdc76b190a611563a2150b02b616d30ef37c9afd421908d4440727ae505dae6927fb91bfdfa47bc9e5acbe0102b1dc3bebfa23571"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x568}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "33573b3022e3ccaec4c788620ccabe3b893d02bf35cf"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4024844}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRESDEC, @ANYRESDEC, @ANYRESOCT=r0, @ANYRESHEX], 0x2c}}, 0x0) r1 = inotify_init() r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xe13093337dc745f4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0xa0000800) socketpair(0x26, 0x3, 0x2, &(0x7f0000000080)) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_bt_hci(r3, 0x400448de, &(0x7f0000000400)="7e777a57ea9772132e0a81ee") 23:20:28 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000080), 0x950, 0x60500) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000100)={0x1, "90"}, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) accept(r2, &(0x7f0000000140)=@hci, &(0x7f00000001c0)=0x80) 23:20:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}]}, 0x1c}}, 0x4011) [ 3217.831372] nla_parse: 49 callbacks suppressed [ 3217.831379] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 23:20:28 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$rds(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000080)=""/114, 0xffffffe3}, {&(0x7f0000000100)=""/165, 0xa5}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000200)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000000000), &(0x7f0000000040)}}, @zcopy_cookie={0x18}, @zcopy_cookie={0x18}, @rdma_dest={0x18}], 0xa0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000040)=@buf={0x1000, &(0x7f0000000180)="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"}) r3 = socket$inet(0x2, 0x6, 0x6c07323c) r4 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$bt_hci(r4, &(0x7f0000000100)={0x1, @read_enc_key_size={{0x1408, 0x2}, {0xc9}}}, 0x6) ioctl$sock_ifreq(r3, 0x8931, &(0x7f0000000080)={'veth0_virt_wifi\x00', @ifru_hwaddr=@local}) 23:20:28 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000000)=0x4, 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 23:20:28 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x4, 0x16102) r1 = syz_open_dev$audion(&(0x7f0000000580), 0x100, 0x49a242) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000100), 0x200c04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x10c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "79888652932a61c4c92b592763bbae5da8825f3de671c5b8e2a3e60df733711b4bd33a"}}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x357}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f0000000000)={0x8, 0xffff7e71, 0x9}) [ 3217.884721] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3217.916263] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:20:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000020003911dc15cbfd4d864d84f7"], 0x1c}}, 0x0) 23:20:28 executing program 2: r0 = getpid() ptrace$getsig(0x4202, r0, 0x569a, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000200039dc15cbfd4d864d84f780"], 0x1c}}, 0x0) 23:20:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000240)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x8002) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="120127bd7023fbdbdf25010000000500210000000000f352c285b902cdcdeb92f962bb19f15fb60339100173e9fc4db4e3e3"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8800) accept4$llc(r3, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x10, 0x80000) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000180)={[{0x2, 0xb641, 0x5b, 0x17, 0xad, 0xae, 0x61, 0x10, 0x6, 0x0, 0x40, 0xff, 0x5}, {0x8a, 0x401, 0x70, 0x1, 0x5, 0x1, 0xff, 0x6, 0xae, 0x5, 0xff, 0x4, 0x1}, {0x7, 0xa6, 0x8, 0x40, 0x92, 0x8, 0x8, 0x4, 0x5, 0x9, 0x1f, 0x0, 0xfffffffffffffffb}], 0xc}) r6 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f00000002c0)=0x13, 0x4) getsockname$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001001ddc9aeb904bd375e631937fa35264de3611feac2b72fec06a046fc91a4f28cfc2bbbd68d546dc7891db1d0d4aca5c6869a4eea1c2221f14c9c98dd632518016be61e21fd1ddd2a836ac07ad5e3dbfd1a542a095d6c3fbebfbab7d59990e2cd043aaee4a6192730a472e31f6e1172b7da0af7536c956a3cc7a403a5770f880a7b5fd8f48fe155cfa79dfd9a999ce4dac6b9f09864923e811f91c37d09842ee064915d6a64e55090910126ec1ed9525de6a62d66d8301d53d849414e5ce232203bc189b1f2cb0d5980cb74eee44fdcf0c5bd9f75649407"], 0x2c}}, 0x0) 23:20:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:28 executing program 5: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x80, 0x8000, 0x0, 0x3778, {{0x8, 0x4, 0x2, 0x1, 0x20, 0x65, 0x0, 0x9d, 0x29, 0x0, @multicast1, @remote, {[@timestamp={0x44, 0xc, 0x24, 0x0, 0x9, [0x8, 0x4]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)={'erspan0\x00', r0, 0x40, 0x20, 0x4, 0x2, {{0x26, 0x4, 0x1, 0x5, 0x98, 0x66, 0x0, 0xb7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0x1f}, {[@noop, @cipso={0x86, 0x6, 0x3}, @end, @timestamp_addr={0x44, 0x34, 0x17, 0x1, 0x4, [{@loopback}, {@local, 0x10001}, {@private=0xa010100, 0x3ff}, {@local, 0x1}, {@broadcast, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @end, @generic={0x82, 0xe, "acd387ee4bd859120f0d905d"}, @timestamp_prespec={0x44, 0xc, 0x56, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x10}, 0x7}]}, @timestamp_addr={0x44, 0x2c, 0xff, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x31}}, {@broadcast, 0x8}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}]}]}}}}}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1b}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfc01}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000090}, 0x10) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000380)=0x1, 0x4) 23:20:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22400, 0x0) getpgid(0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 3217.989463] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 23:20:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0xdc) 23:20:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x100, 0x20480) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x68, 0x5, 0x0, 0x0, @adapter={0x1000, 0x5, 0x2, 0x3}}, {0xff, 0x3, 0x0, 0x0, @sint={0x0, 0xbae7}}, {0x5c7f, 0x3, 0x0, 0x0, @irqchip={0x2, 0x7}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x5, 0x2, 0x3f, 0x83d1, 0xaf}}, {0x0, 0x3, 0x0, 0x0, @msi={0xffff, 0x4, 0x2, 0x8001}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x4ff9, 0x7f, 0x93, 0x7fff, 0x400}}, {0xaf, 0x2, 0x0, 0x0, @msi={0x2, 0x49e, 0xfca, 0x1b8c}}, {0x988, 0x3, 0x0, 0x0, @sint={0x3, 0xb2a}}, {0x8, 0x4, 0x0, 0x0, @msi={0xe14a, 0x9, 0x0, 0x8}}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 23:20:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400007977205fd3feba7caebc5909e55da3217c344ba731ca0edd4d0ba0fcd60c896dffe52c125b3276d63a015459e4f55b7f42dc87e29ef16bca0600dc8b6c"], 0x2c}}, 0x0) 23:20:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) getsockopt$netlink(r4, 0x10e, 0x1, &(0x7f00000002c0)=""/1, &(0x7f0000000300)=0x1) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcd}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x38}}, 0x20000010) r5 = socket$netlink(0x10, 0x3, 0x1) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x1}, 0x14}}, 0x0) r8 = accept(r0, &(0x7f0000000500)=@alg, &(0x7f0000000580)=0x80) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r9, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_DEBUG={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) r10 = syz_open_dev$audion(&(0x7f0000000340), 0x80000001, 0x101) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r7) sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2040201}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r11, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x80}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x85}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008085}, 0x20000004) 23:20:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB, @ANYRESDEC=r0, @ANYBLOB="4e5661038bb93d53d8a97339aa0a5d026ad3fa1aff5bdb70995469cf531ce31a7fa498eac3a4dcf6b2400d90c8fdc80cbc2ff8e0bd99d1dd2edfd1f85752376ea66c8d870956d01d7ca2e9ec5375ff9671f86d3c4171584fcf40fccad81142c436718e9cc9356ef69cad3cb5c17afc27dfec4e7cf27205119343b9dda1c20b42d76b54430a394221aa08a41298691cb87955ae8b92ce5f71e06a603e738d8a31aef86c2b8f8eb4bc55d06264c7591a9ae92bda6b165c2bb6abc4ba47410a2a7a01b3c0bb9902701e0338c403e7721c51192b0900c9a6c3469f9ddeedbe2020b398060d9bdd", @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESDEC=r0], 0x2c}}, 0x0) 23:20:29 executing program 3: socket$nl_route(0x10, 0x3, 0x0) 23:20:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000100)={0x0, 0x0, @ioapic}) 23:20:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000c3b1ed0a0fe5e05f7026fb3416760011007d", @ANYRESHEX], 0x2c}}, 0x0) 23:20:29 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x482040) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 23:20:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendto$isdn(r1, &(0x7f0000000180)={0xdc, 0x9, "82dd76b91c3a6608506adb1cd8481d1c972f56e809ef7f8f32e37b0614d5885536ae43261309dea15bce5e2a08de5736d0376c865597063db8688f582b6b910c7e67e8fe8f8a9f519c6d341ffe04645b1bae48b35918020f817a4728a1ced23466a7dd23aa020fa66aced7da0b31881205205dc95b75d8bfbf391e5375775d7bebf492d921f44a3597fd093780cef83c70d593d3e394a706c2277da80dcd1e1a9e150e4e6ac0988542055da9fa1cb682d56d52a9bd0290a16dc356e2b19ccef9b5253a6e560ddb25600fca9711413f8093"}, 0xd9, 0x24000004, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x50, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 23:20:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080), 0x8fc2, 0x101000) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x28180, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8440, 0x0) getsockname(r1, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000240)=0x80) getsockname(r2, &(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000500)=0x80) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0c002bbd00000000000000060000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) socket$isdn_base(0x22, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x428581, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r5, 0x8250aea6, &(0x7f0000000000)=""/89) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@loopback, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000780)=0xe8) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000440)={0x0, 0x8f7, &(0x7f0000000300)="875f404a38450d3209408759050bbaf222794c5e65e2d42e3c1e954b97f9a83bf7795d1708fd36c765abcb084e31f4b28a8af8e43a21bf6a97580645d6370004367b3de9aad70fc6cfe9d307b53af04c4442659906e76e4e3ffbfa300587cb736fd23581012d008fad89cb5b57fef5397127949789527725613e08a53ae5615319122af653af0ddc947051c5822be178ab0e37f28e049bffb007863d91926861f22d587bb3273fb191984ceaedd4b0b1d3d4a31f3ba2577b18f5bbc9d4646618c71d1eb493f521563d078b", &(0x7f0000000400)="3710150084b71b664e65304e25b985d76a69e05e3ef6d21e420f", 0xcb, 0x1a}) 23:20:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) geteuid() setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000000)={r3, 0x4, 0x400, "cb7ffe23a7025cd8299a98445f9302e100da6e9819f946cdb90944848ca70c681f07fc89dac324ff706c14b7ed3fffb117415c8f5162fe"}) [ 3218.508255] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:20:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x100, 0x20480) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x68, 0x5, 0x0, 0x0, @adapter={0x1000, 0x5, 0x2, 0x3}}, {0xff, 0x3, 0x0, 0x0, @sint={0x0, 0xbae7}}, {0x5c7f, 0x3, 0x0, 0x0, @irqchip={0x2, 0x7}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x5, 0x2, 0x3f, 0x83d1, 0xaf}}, {0x0, 0x3, 0x0, 0x0, @msi={0xffff, 0x4, 0x2, 0x8001}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x4ff9, 0x7f, 0x93, 0x7fff, 0x400}}, {0xaf, 0x2, 0x0, 0x0, @msi={0x2, 0x49e, 0xfca, 0x1b8c}}, {0x988, 0x3, 0x0, 0x0, @sint={0x3, 0xb2a}}, {0x8, 0x4, 0x0, 0x0, @msi={0xe14a, 0x9, 0x0, 0x8}}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 23:20:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84caf1f19c9e3e23ea659283cead622ce300620192569e346cc91aeda97e919ca125828361649aebd19a74c3065f5f25459b6844417837510bdc90b05db36b8ce0a11f66f847b1e67c6467e19d26d205c5e8e7"], 0x2c}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000100)={0xfffffc00, 0x8, 0x7f}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000080)=0x5, 0x8) r3 = getpid() ptrace$getsig(0x4202, r3, 0x28000, &(0x7f0000000000)) [ 3218.566010] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:20:29 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000180)={@l2={0x1f, 0x1, @none, 0xe416, 0x1}, {&(0x7f0000000100)=""/96, 0x60}}, 0xa0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000080), 0x2, 0x800) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000240)={0x2, "05e8"}, 0x3) 23:20:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/150, 0x96}, {&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/155, 0x9b}], 0x9, 0x0, 0x0, 0x20040085}, 0x40000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000018c0)={'sit0\x00', &(0x7f0000001840)={'ip6_vti0\x00', 0x0, 0x29, 0xdb, 0x3, 0x7, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x700, 0x0, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001a00)={'ip_vti0\x00', &(0x7f0000001900)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=r4, @ANYBLOB="78007800000000000000000843e800cc00660000802f9078e00000020a010101440c9b030a01010100000009890fc9ffffffffac1414aaac1e0101830ba4ac1414bb0a01010294040100831fd3e0000001ac14143f64010100ac14142aac1414aa7f000001ac1e0001441039800001000100000009000000019404010044349d23e00000010000000764010101000000057f000001000000057f00000100000000ac14142e000010000a0101000000e441831ff164010100ac1414aaac1e0101ffffffffac1e0001ac1414bbac1414aa89079cac1414aa00"]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r5, &(0x7f0000001780)=@caif=@dbg, &(0x7f0000001800)=0x80) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000001740)={0x1ff, 0x1f}) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 3218.707836] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:20:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84caf1f19c9e3e23ea659283cead622ce300620192569e346cc91aeda97e919ca125828361649aebd19a74c3065f5f25459b6844417837510bdc90b05db36b8ce0a11f66f847b1e67c6467e19d26d205c5e8e7"], 0x2c}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000100)={0xfffffc00, 0x8, 0x7f}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000080)=0x5, 0x8) r3 = getpid() ptrace$getsig(0x4202, r3, 0x28000, &(0x7f0000000000)) 23:20:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/150, 0x96}, {&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/155, 0x9b}], 0x9, 0x0, 0x0, 0x20040085}, 0x40000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000018c0)={'sit0\x00', &(0x7f0000001840)={'ip6_vti0\x00', 0x0, 0x29, 0xdb, 0x3, 0x7, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x700, 0x0, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001a00)={'ip_vti0\x00', &(0x7f0000001900)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=r4, @ANYBLOB="78007800000000000000000843e800cc00660000802f9078e00000020a010101440c9b030a01010100000009890fc9ffffffffac1414aaac1e0101830ba4ac1414bb0a01010294040100831fd3e0000001ac14143f64010100ac14142aac1414aa7f000001ac1e0001441039800001000100000009000000019404010044349d23e00000010000000764010101000000057f000001000000057f00000100000000ac14142e000010000a0101000000e441831ff164010100ac1414aaac1e0101ffffffffac1e0001ac1414bbac1414aa89079cac1414aa00"]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r5, &(0x7f0000001780)=@caif=@dbg, &(0x7f0000001800)=0x80) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000001740)={0x1ff, 0x1f}) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 3218.933093] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:20:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x100, 0x20480) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x68, 0x5, 0x0, 0x0, @adapter={0x1000, 0x5, 0x2, 0x3}}, {0xff, 0x3, 0x0, 0x0, @sint={0x0, 0xbae7}}, {0x5c7f, 0x3, 0x0, 0x0, @irqchip={0x2, 0x7}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x5, 0x2, 0x3f, 0x83d1, 0xaf}}, {0x0, 0x3, 0x0, 0x0, @msi={0xffff, 0x4, 0x2, 0x8001}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x4ff9, 0x7f, 0x93, 0x7fff, 0x400}}, {0xaf, 0x2, 0x0, 0x0, @msi={0x2, 0x49e, 0xfca, 0x1b8c}}, {0x988, 0x3, 0x0, 0x0, @sint={0x3, 0xb2a}}, {0x8, 0x4, 0x0, 0x0, @msi={0xe14a, 0x9, 0x0, 0x8}}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 23:20:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84caf1f19c9e3e23ea659283cead622ce300620192569e346cc91aeda97e919ca125828361649aebd19a74c3065f5f25459b6844417837510bdc90b05db36b8ce0a11f66f847b1e67c6467e19d26d205c5e8e7"], 0x2c}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000100)={0xfffffc00, 0x8, 0x7f}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000080)=0x5, 0x8) r3 = getpid() ptrace$getsig(0x4202, r3, 0x28000, &(0x7f0000000000)) [ 3219.127513] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:20:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x301002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x105000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000340)={r2, 0x8, 0x2, r2}) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000100)) r4 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)={0x184, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'netpci0\x00'}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x38000000, @mcast2, 0xa5}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff92}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000007f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x20040011}, 0x14014) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000080)={0x2c}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r4, 0x4040aea4, &(0x7f0000000040)={0x9, 0x8, 0x8001, 0x39ee92b1156db5b, 0x6}) 23:20:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84caf1f19c9e3e23ea659283cead622ce300620192569e346cc91aeda97e919ca125828361649aebd19a74c3065f5f25459b6844417837510bdc90b05db36b8ce0a11f66f847b1e67c6467e19d26d205c5e8e7"], 0x2c}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000100)={0xfffffc00, 0x8, 0x7f}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000080)=0x5, 0x8) getpid() 23:20:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/150, 0x96}, {&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/155, 0x9b}], 0x9, 0x0, 0x0, 0x20040085}, 0x40000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000018c0)={'sit0\x00', &(0x7f0000001840)={'ip6_vti0\x00', 0x0, 0x29, 0xdb, 0x3, 0x7, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x700, 0x0, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001a00)={'ip_vti0\x00', &(0x7f0000001900)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=r4, @ANYBLOB="78007800000000000000000843e800cc00660000802f9078e00000020a010101440c9b030a01010100000009890fc9ffffffffac1414aaac1e0101830ba4ac1414bb0a01010294040100831fd3e0000001ac14143f64010100ac14142aac1414aa7f000001ac1e0001441039800001000100000009000000019404010044349d23e00000010000000764010101000000057f000001000000057f00000100000000ac14142e000010000a0101000000e441831ff164010100ac1414aaac1e0101ffffffffac1e0001ac1414bbac1414aa89079cac1414aa00"]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r5, &(0x7f0000001780)=@caif=@dbg, &(0x7f0000001800)=0x80) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000001740)={0x1ff, 0x1f}) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @dev}, &(0x7f00000002c0)=0x80) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000300)=0xc, 0x4) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000000)={[{0x401, 0x5701, 0x3, 0x6e, 0x46, 0x7f, 0x6, 0x7, 0x3, 0x3, 0x4, 0x6, 0x2}, {0x8, 0x42, 0x80, 0x1, 0x1f, 0x4, 0x2c, 0x80, 0x9, 0x9, 0x0, 0x7f, 0x9}, {0x2, 0x6, 0x6, 0x5, 0x2, 0x3f, 0x97, 0xff, 0xc3, 0x7, 0xa7, 0xd1, 0xb1}], 0x7f}) 23:20:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:30 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84caf1f19c9e3e23ea659283cead622ce300620192569e346cc91aeda97e919ca125828361649aebd19a74c3065f5f25459b6844417837510bdc90b05db36b8ce0a11f66f847b1e67c6467e19d26d205c5e8e7"], 0x2c}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000100)={0xfffffc00, 0x8, 0x7f}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000080)=0x5, 0x8) [ 3219.352733] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:20:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x100, 0x20480) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x68, 0x5, 0x0, 0x0, @adapter={0x1000, 0x5, 0x2, 0x3}}, {0xff, 0x3, 0x0, 0x0, @sint={0x0, 0xbae7}}, {0x5c7f, 0x3, 0x0, 0x0, @irqchip={0x2, 0x7}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x5, 0x2, 0x3f, 0x83d1, 0xaf}}, {0x0, 0x3, 0x0, 0x0, @msi={0xffff, 0x4, 0x2, 0x8001}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x4ff9, 0x7f, 0x93, 0x7fff, 0x400}}, {0xaf, 0x2, 0x0, 0x0, @msi={0x2, 0x49e, 0xfca, 0x1b8c}}, {0x988, 0x3, 0x0, 0x0, @sint={0x3, 0xb2a}}, {0x8, 0x4, 0x0, 0x0, @msi={0xe14a, 0x9, 0x0, 0x8}}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:30 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84caf1f19c9e3e23ea659283cead622ce300620192569e346cc91aeda97e919ca125828361649aebd19a74c3065f5f25459b6844417837510bdc90b05db36b8ce0a11f66f847b1e67c6467e19d26d205c5e8e7"], 0x2c}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000100)={0xfffffc00, 0x8, 0x7f}) 23:20:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84caf1f19c9e3e23ea659283cead622ce300620192569e346cc91aeda97e919ca125828361649aebd19a74c3065f5f25459b6844417837510bdc90b05db36b8ce0a11f66f847b1e67c6467e19d26d205c5e8e7"], 0x2c}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 23:20:30 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/150, 0x96}, {&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/155, 0x9b}], 0x9, 0x0, 0x0, 0x20040085}, 0x40000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000018c0)={'sit0\x00', &(0x7f0000001840)={'ip6_vti0\x00', 0x0, 0x29, 0xdb, 0x3, 0x7, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x700, 0x0, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001a00)={'ip_vti0\x00', &(0x7f0000001900)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=r4, @ANYBLOB="78007800000000000000000843e800cc00660000802f9078e00000020a010101440c9b030a01010100000009890fc9ffffffffac1414aaac1e0101830ba4ac1414bb0a01010294040100831fd3e0000001ac14143f64010100ac14142aac1414aa7f000001ac1e0001441039800001000100000009000000019404010044349d23e00000010000000764010101000000057f000001000000057f00000100000000ac14142e000010000a0101000000e441831ff164010100ac1414aaac1e0101ffffffffac1e0001ac1414bbac1414aa89079cac1414aa00"]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r5, &(0x7f0000001780)=@caif=@dbg, &(0x7f0000001800)=0x80) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000001740)={0x1ff, 0x1f}) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @dev}, &(0x7f00000002c0)=0x80) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000300)=0xc, 0x4) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000000)={[{0x401, 0x5701, 0x3, 0x6e, 0x46, 0x7f, 0x6, 0x7, 0x3, 0x3, 0x4, 0x6, 0x2}, {0x8, 0x42, 0x80, 0x1, 0x1f, 0x4, 0x2c, 0x80, 0x9, 0x9, 0x0, 0x7f, 0x9}, {0x2, 0x6, 0x6, 0x5, 0x2, 0x3f, 0x97, 0xff, 0xc3, 0x7, 0xa7, 0xd1, 0xb1}], 0x7f}) 23:20:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x100, 0x20480) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84caf1f19c9e3e23ea659283cead622ce300620192569e346cc91aeda97e919ca125828361649aebd19a74c3065f5f25459b6844417837510bdc90b05db36b8ce0a11f66f847b1e67c6467e19d26d205c5e8e7"], 0x2c}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) 23:20:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84caf1f19c9e3e23ea659283cead622ce300620192569e346cc91aeda97e919ca125828361649aebd19a74c3065f5f25459b6844417837510bdc90b05db36b8ce0a11f66f847b1e67c6467e19d26d205c5e8e7"], 0x2c}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 23:20:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000040)={0x3, 0x3, 0x100, @empty, 'rose0\x00'}) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000100)={0xffffffffffffffff, 0x8000, 0x2, "fb153dc2d9537e4a6158747100ae70a872299ce8bde43c0962aa2f38086686"}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000080)) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 23:20:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84caf1f19c9e3e23ea659283cead622ce300620192569e346cc91aeda97e919ca125828361649aebd19a74c3065f5f25459b6844417837510bdc90b05db36b8ce0a11f66f847b1e67c6467e19d26d205c5e8e7"], 0x2c}}, 0x0) 23:20:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x100, 0x20480) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd626230b4387b52", &(0x7f0000000080)=@tcp=r0, 0x2}, 0x47) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1a0, r3, 0x800, 0x8, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x87fa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9707}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa92c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4da4}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x55d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9507}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x924}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x53}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x19}, 0x40}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdaa7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20008090) 23:20:31 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84caf1f19c9e3e23ea659283cead622ce300620192569e346cc91aeda97e919ca125828361649aebd19a74c3065f5f25459b6844417837510bdc90b05db36b8ce0a11f66f847b1e67c6467e19d26d205c5e8e7"], 0x2c}}, 0x0) 23:20:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/150, 0x96}, {&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/155, 0x9b}], 0x9, 0x0, 0x0, 0x20040085}, 0x40000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000018c0)={'sit0\x00', &(0x7f0000001840)={'ip6_vti0\x00', 0x0, 0x29, 0xdb, 0x3, 0x7, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x700, 0x0, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a00)={'ip_vti0\x00', &(0x7f0000001900)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=r3, @ANYBLOB="78007800000000000000000843e800cc00660000802f9078e00000020a010101440c9b030a01010100000009890fc9ffffffffac1414aaac1e0101830ba4ac1414bb0a01010294040100831fd3e0000001ac14143f64010100ac14142aac1414aa7f000001ac1e0001441039800001000100000009000000019404010044349d23e00000010000000764010101000000057f000001000000057f00000100000000ac14142e000010000a0101000000e441831ff164010100ac1414aaac1e0101ffffffffac1e0001ac1414bbac1414aa89079cac1414aa00"]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r4, &(0x7f0000001780)=@caif=@dbg, &(0x7f0000001800)=0x80) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000001740)={0x1ff, 0x1f}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd626230b4387b52", &(0x7f0000000080)=@tcp=r0, 0x2}, 0x47) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1a0, r3, 0x800, 0x8, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x87fa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9707}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa92c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4da4}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x55d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9507}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x924}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x53}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x19}, 0x40}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdaa7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20008090) 23:20:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x100, 0x20480) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:31 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84caf1f19c9e3e23ea659283cead622ce300620192569e346cc91aeda97e919ca125828361649aebd19a74c3065f5f25459b6844417837510bdc90b05db36b8ce0a11f66f847b1e67c6467e19d26d205c5e8e7"], 0x2c}}, 0x0) 23:20:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0xfffffffffffffff8, 0x400}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 23:20:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd626230b4387b52", &(0x7f0000000080)=@tcp=r0, 0x2}, 0x47) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1a0, r3, 0x800, 0x8, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x87fa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9707}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa92c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4da4}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x55d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9507}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x924}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x53}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x19}, 0x40}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdaa7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20008090) 23:20:31 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84caf1f19c9e3e23ea659283cead622ce300620192569e346cc91aeda97e919ca125828361649aebd19a74c3065f5f25459b6844417837510bdc90b05db36b8ce0a11f66f847b1e67c6467e19d26d205c5e8e7"], 0x2c}}, 0x0) 23:20:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd626230b4387b52", &(0x7f0000000080)=@tcp=r0, 0x2}, 0x47) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1a0, r3, 0x800, 0x8, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x87fa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9707}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa92c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4da4}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x55d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9507}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x924}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x53}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x19}, 0x40}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdaa7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}]}, 0x1c}}, 0x0) 23:20:31 executing program 3: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84caf1f19c9e3e23ea659283cead622ce300620192569e346cc91aeda97e919ca125828361649aebd19a74c3065f5f25459b6844417837510bdc90b05db36b8ce0a11f66f847b1e67c6467e19d26d205c5e8e7"], 0x2c}}, 0x0) 23:20:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd626230b4387b52", &(0x7f0000000080)=@tcp=r0, 0x2}, 0x47) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1a0, r2, 0x800, 0x8, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x87fa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9707}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa92c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4da4}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x55d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9507}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x924}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x53}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x19}, 0x40}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdaa7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) 23:20:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x68, 0x5, 0x0, 0x0, @adapter={0x1000, 0x5, 0x2, 0x3}}, {0xff, 0x3, 0x0, 0x0, @sint={0x0, 0xbae7}}, {0x5c7f, 0x3, 0x0, 0x0, @irqchip={0x2, 0x7}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x5, 0x2, 0x3f, 0x83d1, 0xaf}}, {0x0, 0x3, 0x0, 0x0, @msi={0xffff, 0x4, 0x2, 0x8001}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x4ff9, 0x7f, 0x93, 0x7fff, 0x400}}, {0xaf, 0x2, 0x0, 0x0, @msi={0x2, 0x49e, 0xfca, 0x1b8c}}, {0x988, 0x3, 0x0, 0x0, @sint={0x3, 0xb2a}}, {0x8, 0x4, 0x0, 0x0, @msi={0xe14a, 0x9, 0x0, 0x8}}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/150, 0x96}, {&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/155, 0x9b}], 0x9, 0x0, 0x0, 0x20040085}, 0x40000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000018c0)={'sit0\x00', &(0x7f0000001840)={'ip6_vti0\x00', 0x0, 0x29, 0xdb, 0x3, 0x7, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x700, 0x0, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a00)={'ip_vti0\x00', &(0x7f0000001900)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=r3, @ANYBLOB="78007800000000000000000843e800cc00660000802f9078e00000020a010101440c9b030a01010100000009890fc9ffffffffac1414aaac1e0101830ba4ac1414bb0a01010294040100831fd3e0000001ac14143f64010100ac14142aac1414aa7f000001ac1e0001441039800001000100000009000000019404010044349d23e00000010000000764010101000000057f000001000000057f00000100000000ac14142e000010000a0101000000e441831ff164010100ac1414aaac1e0101ffffffffac1e0001ac1414bbac1414aa89079cac1414aa00"]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r4, &(0x7f0000001780)=@caif=@dbg, &(0x7f0000001800)=0x80) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd626230b4387b52", &(0x7f0000000080)=@tcp=r0, 0x2}, 0x47) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 23:20:31 executing program 5: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 23:20:31 executing program 3: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84caf1f19c9e3e23ea659283cead622ce300620192569e346cc91aeda97e919ca125828361649aebd19a74c3065f5f25459b6844417837510bdc90b05db36b8ce0a11f66f847b1e67c6467e19d26d205c5e8e7"], 0x2c}}, 0x0) 23:20:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 23:20:31 executing program 3: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84caf1f19c9e3e23ea659283cead622ce300620192569e346cc91aeda97e919ca125828361649aebd19a74c3065f5f25459b6844417837510bdc90b05db36b8ce0a11f66f847b1e67c6467e19d26d205c5e8e7"], 0x2c}}, 0x0) 23:20:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd626230b4387b52", &(0x7f0000000080)=@tcp=r0, 0x2}, 0x47) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 23:20:31 executing program 5: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 23:20:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x68, 0x5, 0x0, 0x0, @adapter={0x1000, 0x5, 0x2, 0x3}}, {0xff, 0x3, 0x0, 0x0, @sint={0x0, 0xbae7}}, {0x5c7f, 0x3, 0x0, 0x0, @irqchip={0x2, 0x7}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x5, 0x2, 0x3f, 0x83d1, 0xaf}}, {0x0, 0x3, 0x0, 0x0, @msi={0xffff, 0x4, 0x2, 0x8001}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x4ff9, 0x7f, 0x93, 0x7fff, 0x400}}, {0xaf, 0x2, 0x0, 0x0, @msi={0x2, 0x49e, 0xfca, 0x1b8c}}, {0x988, 0x3, 0x0, 0x0, @sint={0x3, 0xb2a}}, {0x8, 0x4, 0x0, 0x0, @msi={0xe14a, 0x9, 0x0, 0x8}}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 23:20:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd626230b4387b52", &(0x7f0000000080)=@tcp=r0, 0x2}, 0x47) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) 23:20:31 executing program 5: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 23:20:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/150, 0x96}, {&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/155, 0x9b}], 0x9, 0x0, 0x0, 0x20040085}, 0x40000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000018c0)={'sit0\x00', &(0x7f0000001840)={'ip6_vti0\x00', 0x0, 0x29, 0xdb, 0x3, 0x7, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x700, 0x0, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a00)={'ip_vti0\x00', &(0x7f0000001900)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=r3, @ANYBLOB="78007800000000000000000843e800cc00660000802f9078e00000020a010101440c9b030a01010100000009890fc9ffffffffac1414aaac1e0101830ba4ac1414bb0a01010294040100831fd3e0000001ac14143f64010100ac14142aac1414aa7f000001ac1e0001441039800001000100000009000000019404010044349d23e00000010000000764010101000000057f000001000000057f00000100000000ac14142e000010000a0101000000e441831ff164010100ac1414aaac1e0101ffffffffac1e0001ac1414bbac1414aa89079cac1414aa00"]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r4, &(0x7f0000001780)=@caif=@dbg, &(0x7f0000001800)=0x80) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:31 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0x200000000c01, 0x40) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="9a000000", @ANYRES16=0x0, @ANYBLOB="080027bd7000fd5f766c616e0000000000000800090002000000"], 0x30}}, 0x44800) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f00000000c0)) syz_open_dev$audion(&(0x7f0000000180), 0x6, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) 23:20:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 23:20:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd626230b4387b52", &(0x7f0000000080)=@tcp=r0, 0x2}, 0x47) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 23:20:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x68, 0x5, 0x0, 0x0, @adapter={0x1000, 0x5, 0x2, 0x3}}, {0xff, 0x3, 0x0, 0x0, @sint={0x0, 0xbae7}}, {0x5c7f, 0x3, 0x0, 0x0, @irqchip={0x2, 0x7}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x5, 0x2, 0x3f, 0x83d1, 0xaf}}, {0x0, 0x3, 0x0, 0x0, @msi={0xffff, 0x4, 0x2, 0x8001}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x4ff9, 0x7f, 0x93, 0x7fff, 0x400}}, {0xaf, 0x2, 0x0, 0x0, @msi={0x2, 0x49e, 0xfca, 0x1b8c}}, {0x988, 0x3, 0x0, 0x0, @sint={0x3, 0xb2a}}, {0x8, 0x4, 0x0, 0x0, @msi={0xe14a, 0x9, 0x0, 0x8}}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:31 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0xfffffffffffffffd) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x200100) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000040)={&(0x7f0000000100)={{@host, 0x1}, {@hyper, 0xfffff08b}, 0x400, "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"}, 0x418, 0x3d}) r3 = syz_open_dev$audion(&(0x7f00000006c0), 0x6, 0x1) ioctl$KVM_ASSIGN_PCI_DEVICE(r3, 0x8040ae69, &(0x7f0000000700)={0x800, 0x400, 0x7f, 0x2, 0x3f}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r6, 0x7a9, &(0x7f00000005c0)={{@host, 0x1}, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x8, 0x1bfd, 0xa7bd, 0x8}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000680)={r2, 0x1ff, 0x8, r7}) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000080)={0x8, 0x7fffffff}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r8, 0x8070ae9f, &(0x7f0000000600)) 23:20:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd626230b4387b52", &(0x7f0000000080)=@tcp=r0, 0x2}, 0x47) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 23:20:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 23:20:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 23:20:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd626230b4387b52", &(0x7f0000000080)=@tcp=r0, 0x2}, 0x47) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 23:20:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/150, 0x96}, {&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/155, 0x9b}], 0x9, 0x0, 0x0, 0x20040085}, 0x40000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000018c0)={'sit0\x00', &(0x7f0000001840)={'ip6_vti0\x00', 0x0, 0x29, 0xdb, 0x3, 0x7, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x700, 0x0, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a00)={'ip_vti0\x00', &(0x7f0000001900)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=r3, @ANYBLOB="78007800000000000000000843e800cc00660000802f9078e00000020a010101440c9b030a01010100000009890fc9ffffffffac1414aaac1e0101830ba4ac1414bb0a01010294040100831fd3e0000001ac14143f64010100ac14142aac1414aa7f000001ac1e0001441039800001000100000009000000019404010044349d23e00000010000000764010101000000057f000001000000057f00000100000000ac14142e000010000a0101000000e441831ff164010100ac1414aaac1e0101ffffffffac1e0001ac1414bbac1414aa89079cac1414aa00"]}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x68, 0x5, 0x0, 0x0, @adapter={0x1000, 0x5, 0x2, 0x3}}, {0xff, 0x3, 0x0, 0x0, @sint={0x0, 0xbae7}}, {0x5c7f, 0x3, 0x0, 0x0, @irqchip={0x2, 0x7}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x5, 0x2, 0x3f, 0x83d1, 0xaf}}, {0x0, 0x3, 0x0, 0x0, @msi={0xffff, 0x4, 0x2, 0x8001}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x4ff9, 0x7f, 0x93, 0x7fff, 0x400}}, {0xaf, 0x2, 0x0, 0x0, @msi={0x2, 0x49e, 0xfca, 0x1b8c}}, {0x988, 0x3, 0x0, 0x0, @sint={0x3, 0xb2a}}, {0x8, 0x4, 0x0, 0x0, @msi={0xe14a, 0x9, 0x0, 0x8}}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd626230b4387b52", &(0x7f0000000080)=@tcp=r0, 0x2}, 0x47) 23:20:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 23:20:32 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000580), 0x3ff, 0x20a000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f00000006c0)={0x2, 0x95b, &(0x7f00000005c0)="1b44b6cfd3db0f2744b6e551f1fe626f3008c26d0879d4bc35a6c002fc0bc81e9776fa3b8cd463ee347931af", &(0x7f0000000600)="7581df4f18aa7bed951b90df2e2b99de908e1cee6a29a15fb92a32c65983b0cd1322c48cd23c8a5d1c8053dbe8791fb87294fc15c38b45d3e99062f072fde672ad9755cf57cf585581e654df1f4089b1b4246017a6d4157f94b6a1e32d62f66f204a279e03a3afa1e6633353b63b9f424e2d8960014318681b4ad9987704c37178d80ba0911da2718c89cc30d9", 0x2c, 0x8d}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f0000000000)={0x0, 0x40, 0xffffffff, 0x2, 0xcaf3}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r6, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="b8020000", @ANYRES16=r4, @ANYBLOB="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"], 0x2a8}}, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) accept4$llc(r0, &(0x7f0000000700)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000740)=0x10, 0x80000) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}}, 0x2004c000) 23:20:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 23:20:32 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd626230b4387b52", &(0x7f0000000080)=@tcp, 0x2}, 0x47) 23:20:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x20000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:32 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 23:20:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2c}}, 0x0) 23:20:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x68, 0x5, 0x0, 0x0, @adapter={0x1000, 0x5, 0x2, 0x3}}, {0xff, 0x3, 0x0, 0x0, @sint={0x0, 0xbae7}}, {0x5c7f, 0x3, 0x0, 0x0, @irqchip={0x2, 0x7}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x5, 0x2, 0x3f, 0x83d1, 0xaf}}, {0x0, 0x3, 0x0, 0x0, @msi={0xffff, 0x4, 0x2, 0x8001}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x4ff9, 0x7f, 0x93, 0x7fff, 0x400}}, {0xaf, 0x2, 0x0, 0x0, @msi={0x2, 0x49e, 0xfca, 0x1b8c}}, {0x988, 0x3, 0x0, 0x0, @sint={0x3, 0xb2a}}, {0x8, 0x4, 0x0, 0x0, @msi={0xe14a, 0x9, 0x0, 0x8}}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/150, 0x96}, {&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/155, 0x9b}], 0x9, 0x0, 0x0, 0x20040085}, 0x40000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000018c0)={'sit0\x00', &(0x7f0000001840)={'ip6_vti0\x00', 0x0, 0x29, 0xdb, 0x3, 0x7, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x700, 0x0, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a00)={'ip_vti0\x00', &(0x7f0000001900)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=r3, @ANYBLOB="78007800000000000000000843e800cc00660000802f9078e00000020a010101440c9b030a01010100000009890fc9ffffffffac1414aaac1e0101830ba4ac1414bb0a01010294040100831fd3e0000001ac14143f64010100ac14142aac1414aa7f000001ac1e0001441039800001000100000009000000019404010044349d23e00000010000000764010101000000057f000001000000057f00000100000000ac14142e000010000a0101000000e441831ff164010100ac1414aaac1e0101ffffffffac1e0001ac1414bbac1414aa89079cac1414aa00"]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:32 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 23:20:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x20000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2c}}, 0x0) 23:20:32 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 23:20:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000240)=""/183) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@private0, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000080)=0x6, 0x4) r5 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000300)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x20008001) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x4, &(0x7f0000000000), 0x2, r5}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r5, 0xae44, 0x3) 23:20:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2c}}, 0x0) 23:20:32 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000080)=@tcp, 0x2}, 0x20) 23:20:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x68, 0x5, 0x0, 0x0, @adapter={0x1000, 0x5, 0x2, 0x3}}, {0xff, 0x3, 0x0, 0x0, @sint={0x0, 0xbae7}}, {0x5c7f, 0x3, 0x0, 0x0, @irqchip={0x2, 0x7}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x5, 0x2, 0x3f, 0x83d1, 0xaf}}, {0x0, 0x3, 0x0, 0x0, @msi={0xffff, 0x4, 0x2, 0x8001}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x4ff9, 0x7f, 0x93, 0x7fff, 0x400}}, {0xaf, 0x2, 0x0, 0x0, @msi={0x2, 0x49e, 0xfca, 0x1b8c}}, {0x988, 0x3, 0x0, 0x0, @sint={0x3, 0xb2a}}, {0x8, 0x4, 0x0, 0x0, @msi={0xe14a, 0x9, 0x0, 0x8}}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x2c}}, 0x0) 23:20:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x20000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:32 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000080)=@tcp, 0x2}, 0x20) 23:20:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/150, 0x96}, {&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/155, 0x9b}], 0x9, 0x0, 0x0, 0x20040085}, 0x40000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000018c0)={'sit0\x00', &(0x7f0000001840)={'ip6_vti0\x00', 0x0, 0x29, 0xdb, 0x3, 0x7, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x700, 0x0, 0x6}}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x2c}}, 0x0) 23:20:32 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000080)=@tcp, 0x2}, 0x20) 23:20:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x2c}}, 0x0) 23:20:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:33 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100), &(0x7f0000000080)=@tcp, 0x2}, 0x20) 23:20:33 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x68, 0x5, 0x0, 0x0, @adapter={0x1000, 0x5, 0x2, 0x3}}, {0xff, 0x3, 0x0, 0x0, @sint={0x0, 0xbae7}}, {0x5c7f, 0x3, 0x0, 0x0, @irqchip={0x2, 0x7}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x5, 0x2, 0x3f, 0x83d1, 0xaf}}, {0x0, 0x3, 0x0, 0x0, @msi={0xffff, 0x4, 0x2, 0x8001}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x4ff9, 0x7f, 0x93, 0x7fff, 0x400}}, {0xaf, 0x2, 0x0, 0x0, @msi={0x2, 0x49e, 0xfca, 0x1b8c}}, {0x988, 0x3, 0x0, 0x0, @sint={0x3, 0xb2a}}, {0x8, 0x4, 0x0, 0x0, @msi={0xe14a, 0x9, 0x0, 0x8}}]}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:33 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000040)=0x1ff) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000000000009000000010000000000000000bbb3a3b000000007000000090000000700000000000000000000000000000000000000aa0000000200000000000000000000000700000000000000060000000000000001000000000000000200000005000000ff0300000300000000000000000000000900000000000000000001000000000003000000000000000000008007000000c5000000040000000000000000000000000100000300000000000000000000000000000000000000000000000000000003000000030000000000000000000000c0f6ffff0800000000000000000000000000000000000000000000000000000007000000030000000000000000000000f50d000000010000000000000000000000000000000200000000000000000000630d00000100000000000000000000000700000001000100"/344]) 23:20:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x2c}}, 0x0) 23:20:33 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x68, 0x5, 0x0, 0x0, @adapter={0x1000, 0x5, 0x2, 0x3}}, {0xff, 0x3, 0x0, 0x0, @sint={0x0, 0xbae7}}, {0x5c7f, 0x3, 0x0, 0x0, @irqchip={0x2, 0x7}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x5, 0x2, 0x3f, 0x83d1, 0xaf}}, {0x0, 0x3, 0x0, 0x0, @msi={0xffff, 0x4, 0x2, 0x8001}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x4ff9, 0x7f, 0x93, 0x7fff, 0x400}}, {0xaf, 0x2, 0x0, 0x0, @msi={0x2, 0x49e, 0xfca, 0x1b8c}}, {0x988, 0x3, 0x0, 0x0, @sint={0x3, 0xb2a}}, {0x8, 0x4, 0x0, 0x0, @msi={0xe14a, 0x9, 0x0, 0x8}}]}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:33 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100), &(0x7f0000000080)=@tcp, 0x2}, 0x20) 23:20:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/150, 0x96}, {&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/155, 0x9b}], 0x9, 0x0, 0x0, 0x20040085}, 0x40000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x2c}}, 0x0) 23:20:33 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100), &(0x7f0000000080)=@tcp, 0x2}, 0x20) 23:20:33 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x68, 0x5, 0x0, 0x0, @adapter={0x1000, 0x5, 0x2, 0x3}}, {0xff, 0x3, 0x0, 0x0, @sint={0x0, 0xbae7}}, {0x5c7f, 0x3, 0x0, 0x0, @irqchip={0x2, 0x7}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x5, 0x2, 0x3f, 0x83d1, 0xaf}}, {0x0, 0x3, 0x0, 0x0, @msi={0xffff, 0x4, 0x2, 0x8001}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x4ff9, 0x7f, 0x93, 0x7fff, 0x400}}, {0xaf, 0x2, 0x0, 0x0, @msi={0x2, 0x49e, 0xfca, 0x1b8c}}, {0x988, 0x3, 0x0, 0x0, @sint={0x3, 0xb2a}}, {0x8, 0x4, 0x0, 0x0, @msi={0xe14a, 0x9, 0x0, 0x8}}]}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:33 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x68, 0x5, 0x0, 0x0, @adapter={0x1000, 0x5, 0x2, 0x3}}, {0xff, 0x3, 0x0, 0x0, @sint={0x0, 0xbae7}}, {0x5c7f, 0x3, 0x0, 0x0, @irqchip={0x2, 0x7}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x5, 0x2, 0x3f, 0x83d1, 0xaf}}, {0x0, 0x3, 0x0, 0x0, @msi={0xffff, 0x4, 0x2, 0x8001}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x4ff9, 0x7f, 0x93, 0x7fff, 0x400}}, {0xaf, 0x2, 0x0, 0x0, @msi={0x2, 0x49e, 0xfca, 0x1b8c}}, {0x988, 0x3, 0x0, 0x0, @sint={0x3, 0xb2a}}, {0x8, 0x4, 0x0, 0x0, @msi={0xe14a, 0x9, 0x0, 0x8}}]}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 23:20:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x2c}}, 0x0) 23:20:33 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f", &(0x7f0000000080)=@tcp, 0x2}, 0x20) 23:20:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_crypto(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delrng={0x10, 0x14, 0x90, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc045}, 0x4000) 23:20:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:33 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x68, 0x5, 0x0, 0x0, @adapter={0x1000, 0x5, 0x2, 0x3}}, {0xff, 0x3, 0x0, 0x0, @sint={0x0, 0xbae7}}, {0x5c7f, 0x3, 0x0, 0x0, @irqchip={0x2, 0x7}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x5, 0x2, 0x3f, 0x83d1, 0xaf}}, {0x0, 0x3, 0x0, 0x0, @msi={0xffff, 0x4, 0x2, 0x8001}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x4ff9, 0x7f, 0x93, 0x7fff, 0x400}}, {0xaf, 0x2, 0x0, 0x0, @msi={0x2, 0x49e, 0xfca, 0x1b8c}}, {0x988, 0x3, 0x0, 0x0, @sint={0x3, 0xb2a}}, {0x8, 0x4, 0x0, 0x0, @msi={0xe14a, 0x9, 0x0, 0x8}}]}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 23:20:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84caf1f19c9e3e23ea659283cead622ce300620192569e346cc91aeda97e919ca12582836164"], 0x2c}}, 0x0) 23:20:33 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f", &(0x7f0000000080)=@tcp, 0x2}, 0x20) 23:20:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/150, 0x96}, {&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/155, 0x9b}], 0x9, 0x0, 0x0, 0x20040085}, 0x40000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x2c}}, 0x0) 23:20:33 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f", &(0x7f0000000080)=@tcp, 0x2}, 0x20) 23:20:33 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x68, 0x5, 0x0, 0x0, @adapter={0x1000, 0x5, 0x2, 0x3}}, {0xff, 0x3, 0x0, 0x0, @sint={0x0, 0xbae7}}, {0x5c7f, 0x3, 0x0, 0x0, @irqchip={0x2, 0x7}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x5, 0x2, 0x3f, 0x83d1, 0xaf}}, {0x0, 0x3, 0x0, 0x0, @msi={0xffff, 0x4, 0x2, 0x8001}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x4ff9, 0x7f, 0x93, 0x7fff, 0x400}}, {0xaf, 0x2, 0x0, 0x0, @msi={0x2, 0x49e, 0xfca, 0x1b8c}}, {0x988, 0x3, 0x0, 0x0, @sint={0x3, 0xb2a}}, {0x8, 0x4, 0x0, 0x0, @msi={0xe14a, 0x9, 0x0, 0x8}}]}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 23:20:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x68, 0x5, 0x0, 0x0, @adapter={0x1000, 0x5, 0x2, 0x3}}, {0xff, 0x3, 0x0, 0x0, @sint={0x0, 0xbae7}}, {0x5c7f, 0x3, 0x0, 0x0, @irqchip={0x2, 0x7}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x5, 0x2, 0x3f, 0x83d1, 0xaf}}, {0x0, 0x3, 0x0, 0x0, @msi={0xffff, 0x4, 0x2, 0x8001}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x4ff9, 0x7f, 0x93, 0x7fff, 0x400}}, {0xaf, 0x2, 0x0, 0x0, @msi={0x2, 0x49e, 0xfca, 0x1b8c}}, {0x988, 0x3, 0x0, 0x0, @sint={0x3, 0xb2a}}, {0x8, 0x4, 0x0, 0x0, @msi={0xe14a, 0x9, 0x0, 0x8}}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x2c}}, 0x0) 23:20:33 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26", &(0x7f0000000080)=@tcp, 0x2}, 0x20) 23:20:33 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0xc0, 0x400000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x240180, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 23:20:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x2c}}, 0x0) 23:20:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:33 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26", &(0x7f0000000080)=@tcp, 0x2}, 0x20) 23:20:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x68, 0x5, 0x0, 0x0, @adapter={0x1000, 0x5, 0x2, 0x3}}, {0xff, 0x3, 0x0, 0x0, @sint={0x0, 0xbae7}}, {0x5c7f, 0x3, 0x0, 0x0, @irqchip={0x2, 0x7}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x5, 0x2, 0x3f, 0x83d1, 0xaf}}, {0x0, 0x3, 0x0, 0x0, @msi={0xffff, 0x4, 0x2, 0x8001}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x4ff9, 0x7f, 0x93, 0x7fff, 0x400}}, {0xaf, 0x2, 0x0, 0x0, @msi={0x2, 0x49e, 0xfca, 0x1b8c}}, {0x988, 0x3, 0x0, 0x0, @sint={0x3, 0xb2a}}, {0x8, 0x4, 0x0, 0x0, @msi={0xe14a, 0x9, 0x0, 0x8}}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/150, 0x96}, {&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/155, 0x9b}], 0x9, 0x0, 0x0, 0x20040085}, 0x40000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:33 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26", &(0x7f0000000080)=@tcp, 0x2}, 0x20) 23:20:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x68, 0x5, 0x0, 0x0, @adapter={0x1000, 0x5, 0x2, 0x3}}, {0xff, 0x3, 0x0, 0x0, @sint={0x0, 0xbae7}}, {0x5c7f, 0x3, 0x0, 0x0, @irqchip={0x2, 0x7}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x5, 0x2, 0x3f, 0x83d1, 0xaf}}, {0x0, 0x3, 0x0, 0x0, @msi={0xffff, 0x4, 0x2, 0x8001}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x4ff9, 0x7f, 0x93, 0x7fff, 0x400}}, {0xaf, 0x2, 0x0, 0x0, @msi={0x2, 0x49e, 0xfca, 0x1b8c}}, {0x988, 0x3, 0x0, 0x0, @sint={0x3, 0xb2a}}, {0x8, 0x4, 0x0, 0x0, @msi={0xe14a, 0x9, 0x0, 0x8}}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84caf1f19c9e3e23ea659283cead622c"], 0x2c}}, 0x0) 23:20:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={0x0, @isdn={0x22, 0x3f, 0x6, 0x2}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, @isdn={0x22, 0x5, 0x1, 0x7, 0x8}, 0x81, 0x0, 0x0, 0x0, 0xfffc, &(0x7f0000000100)='vlan0\x00', 0x800000083, 0x2, 0x9}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) 23:20:33 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x68, 0x5, 0x0, 0x0, @adapter={0x1000, 0x5, 0x2, 0x3}}, {0xff, 0x3, 0x0, 0x0, @sint={0x0, 0xbae7}}, {0x5c7f, 0x3, 0x0, 0x0, @irqchip={0x2, 0x7}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x5, 0x2, 0x3f, 0x83d1, 0xaf}}, {0x0, 0x3, 0x0, 0x0, @msi={0xffff, 0x4, 0x2, 0x8001}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x4ff9, 0x7f, 0x93, 0x7fff, 0x400}}, {0xaf, 0x2, 0x0, 0x0, @msi={0x2, 0x49e, 0xfca, 0x1b8c}}, {0x988, 0x3, 0x0, 0x0, @sint={0x3, 0xb2a}}, {0x8, 0x4, 0x0, 0x0, @msi={0xe14a, 0x9, 0x0, 0x8}}]}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 23:20:33 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68", &(0x7f0000000080)=@tcp, 0x2}, 0x20) 23:20:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:33 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x68, 0x5, 0x0, 0x0, @adapter={0x1000, 0x5, 0x2, 0x3}}, {0xff, 0x3, 0x0, 0x0, @sint={0x0, 0xbae7}}, {0x5c7f, 0x3, 0x0, 0x0, @irqchip={0x2, 0x7}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x5, 0x2, 0x3f, 0x83d1, 0xaf}}, {0x0, 0x3, 0x0, 0x0, @msi={0xffff, 0x4, 0x2, 0x8001}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x4ff9, 0x7f, 0x93, 0x7fff, 0x400}}, {0xaf, 0x2, 0x0, 0x0, @msi={0x2, 0x49e, 0xfca, 0x1b8c}}, {0x988, 0x3, 0x0, 0x0, @sint={0x3, 0xb2a}}, {0x8, 0x4, 0x0, 0x0, @msi={0xe14a, 0x9, 0x0, 0x8}}]}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 23:20:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=','], 0x2c}}, 0x0) 23:20:33 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68", &(0x7f0000000080)=@tcp, 0x2}, 0x20) [ 3222.974048] nla_parse: 7 callbacks suppressed [ 3222.974055] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:20:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/150, 0x96}, {&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/155, 0x9b}], 0x9, 0x0, 0x0, 0x20040085}, 0x40000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:34 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68", &(0x7f0000000080)=@tcp, 0x2}, 0x20) 23:20:34 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x68, 0x5, 0x0, 0x0, @adapter={0x1000, 0x5, 0x2, 0x3}}, {0xff, 0x3, 0x0, 0x0, @sint={0x0, 0xbae7}}, {0x5c7f, 0x3, 0x0, 0x0, @irqchip={0x2, 0x7}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x5, 0x2, 0x3f, 0x83d1, 0xaf}}, {0x0, 0x3, 0x0, 0x0, @msi={0xffff, 0x4, 0x2, 0x8001}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x4ff9, 0x7f, 0x93, 0x7fff, 0x400}}, {0xaf, 0x2, 0x0, 0x0, @msi={0x2, 0x49e, 0xfca, 0x1b8c}}, {0x988, 0x3, 0x0, 0x0, @sint={0x3, 0xb2a}}, {0x8, 0x4, 0x0, 0x0, @msi={0xe14a, 0x9, 0x0, 0x8}}]}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 23:20:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=','], 0x2c}}, 0x0) 23:20:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:34 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd62", &(0x7f0000000080)=@tcp, 0x2}, 0x20) 23:20:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x121800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) accept(r2, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=','], 0x2c}}, 0x0) 23:20:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/150, 0x96}, {&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/155, 0x9b}], 0x9, 0x0, 0x0, 0x20040085}, 0x40000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84caf1f19c"], 0x2c}}, 0x0) 23:20:34 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd62", &(0x7f0000000080)=@tcp, 0x2}, 0x20) 23:20:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:34 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd62", &(0x7f0000000080)=@tcp, 0x2}, 0x20) 23:20:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:34 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd626230b4", &(0x7f0000000080)=@tcp, 0x2}, 0x20) 23:20:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=','], 0x2c}}, 0x0) [ 3223.422690] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:20:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/150, 0x96}, {&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/155, 0x9b}], 0x9, 0x0, 0x0, 0x20040085}, 0x40000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:34 executing program 1: inotify_rm_watch(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc07, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000040)=0x6427, 0x8) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000), 0x4) 23:20:34 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd626230b4", &(0x7f0000000080)=@tcp, 0x2}, 0x20) 23:20:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=','], 0x2c}}, 0x0) 23:20:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) 23:20:34 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd626230b4", &(0x7f0000000080)=@tcp, 0x2}, 0x20) 23:20:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:34 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 23:20:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=','], 0x2c}}, 0x0) 23:20:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:34 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd626230b4387b", &(0x7f0000000080)=@tcp, 0x2}, 0x20) 23:20:34 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 23:20:34 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd626230b4387b", &(0x7f0000000080)=@tcp, 0x2}, 0x20) 23:20:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) 23:20:34 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd626230b4387b", &(0x7f0000000080)=@tcp, 0x2}, 0x20) 23:20:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000000)={&(0x7f0000000100)=[0x9, 0x800, 0x200, 0x3, 0x3, 0x64c, 0x8001, 0x1, 0x1, 0x101, 0xa33, 0x9, 0x5, 0x3, 0x5, 0x80000001, 0x80000001, 0x1, 0x2, 0xdf7e, 0x0, 0x800, 0x100, 0x8, 0xe3cd, 0x0, 0x7a39, 0x4, 0x3, 0x720, 0x5f, 0x0, 0x1f, 0x1f, 0x80, 0x7, 0xff, 0x1, 0x80000000, 0x7, 0x5, 0x7, 0x8, 0x6, 0x1, 0x80, 0x2, 0x4, 0x1, 0x100, 0x8, 0x3, 0x513, 0x1, 0x2, 0x0, 0xf943, 0x2, 0x0, 0x3, 0xffff, 0x40, 0x81, 0x3f0, 0x9, 0x0, 0x2, 0x5, 0x2, 0x6, 0xffe000, 0x400, 0x100, 0x3, 0x6, 0x80000000, 0x7fff, 0x4, 0x4, 0x4, 0x91, 0x80000001, 0x7, 0xffffff3d, 0x9, 0xb2, 0x3, 0x4, 0x4, 0x9, 0x1, 0x4, 0x7, 0x5715, 0xff, 0x5, 0xc7f, 0xffff, 0x7, 0x5, 0x3, 0x7fff, 0x3, 0x200, 0x0, 0x8, 0x2, 0x4, 0x2, 0x1, 0x4, 0x1000, 0xffffffe9, 0x6, 0x483492a5, 0x80000000, 0x9, 0x0, 0x7, 0x0, 0x8, 0x40, 0x8, 0x13d, 0x2, 0x8fe, 0x20, 0x6, 0xca, 0x8f7, 0x1, 0x4a0, 0x80000001, 0x7fff, 0x8, 0x0, 0x7fffffff, 0x7f, 0x4e9, 0xfffffff8, 0x0, 0x0, 0x17, 0x3ff, 0x6fd, 0x100, 0xfffffff7, 0x9, 0x634, 0x5, 0x0, 0x3, 0x6373b32e, 0x40, 0x5, 0x1, 0x52, 0x4, 0xe3f, 0x10001, 0x1, 0x6, 0x5, 0xfffffffb, 0xfb, 0x4, 0x1, 0x10001, 0x1, 0x8, 0x65, 0xd8, 0x9, 0x255c3c48, 0xa80, 0x580, 0x1, 0x0, 0x6, 0x3, 0x2, 0x100, 0x1f, 0x1, 0x7, 0x1, 0x0, 0x1, 0x9, 0xff, 0x80, 0x5, 0x2d9, 0x1, 0x10001, 0x3, 0x868, 0x2, 0xbc, 0x9, 0x5, 0x78cf, 0x8, 0x9, 0x4, 0x3, 0x200, 0x8, 0x7, 0x0, 0x0, 0x90, 0x3f, 0x8, 0x80, 0xd2de, 0x0, 0x7, 0x10000, 0x80000000, 0x7, 0x2, 0x4, 0x1, 0x3, 0xffffff6a, 0x400, 0x0, 0x80, 0xff, 0x10000, 0x9, 0x0, 0x6, 0x2, 0xfffff78e, 0x4, 0x8, 0x0, 0x8000, 0x8000, 0x91f9, 0x5, 0x2, 0xa26, 0x4, 0x2, 0x9ef, 0x4, 0x7ff, 0x80000000, 0xfffffffe, 0x7, 0x3f, 0x35, 0x1c2, 0xe597, 0x1000, 0xffffffff, 0x9f09, 0xfff, 0x1, 0xffffffff, 0x0, 0x1, 0x2, 0xff, 0x9, 0x1ff, 0x6, 0x5, 0x401, 0x2, 0xfffffff9, 0x1, 0x0, 0x8, 0x40, 0x5, 0x1f, 0x800, 0xffffffff, 0x2, 0x10001, 0x1c8, 0x6, 0x9, 0x1, 0x3, 0x7f, 0x2f, 0xfff, 0xfffffffb, 0x9, 0x4, 0x80, 0x4, 0x1ff, 0x923c, 0x8, 0xff, 0x6, 0x10001, 0x9, 0xd59, 0x6, 0x20, 0x3, 0x9, 0x400, 0x369, 0x0, 0x80000001, 0x4, 0x36f2, 0x600000, 0x6, 0x8, 0x1, 0x4, 0x1, 0x3, 0x8, 0x6, 0x8001, 0x6de, 0x0, 0x3c13, 0x0, 0x7fff, 0x0, 0x685c, 0x6, 0xffffffe0, 0x0, 0x7, 0x8, 0x1, 0x89dc, 0x8, 0x40, 0xffffffff, 0x3c23, 0x5, 0xfffffffb, 0x3, 0x8, 0x800, 0x7, 0x53db02e2, 0x2, 0x8b, 0x6, 0x3, 0x7, 0x2, 0x401, 0x81, 0x9, 0x80000001, 0x7, 0xa8, 0x400, 0x3, 0x6130, 0x0, 0x4, 0x5db, 0x7, 0x4, 0x0, 0x2, 0x1, 0x2, 0x3ff, 0x9, 0x9, 0x2, 0xdc, 0x6d3, 0x7, 0x8, 0x2, 0x8, 0x1000, 0xfffffffc, 0x8, 0x9, 0x940, 0x7, 0x9, 0xfffffffa, 0x8, 0x40, 0x1, 0x76, 0x8, 0x9, 0x90, 0xeb23, 0x5d94241, 0xf8d, 0x1, 0x1, 0x4, 0x2, 0x5, 0x1, 0x401, 0x96, 0x7, 0x10000, 0x3, 0xfffffffd, 0x45, 0x200, 0x4, 0x8, 0x9, 0x8001, 0x32ea, 0x5, 0x9, 0x4, 0x9, 0x7ff, 0x0, 0x8, 0x6, 0x4, 0x8, 0x1, 0xfffffc01, 0x5, 0x3, 0x7f, 0x5, 0x3, 0x101, 0x9, 0x9, 0x100, 0x1, 0x7, 0x60, 0x7, 0xfff, 0x7, 0xffffff5e, 0x9, 0x1, 0x8000, 0xfff, 0xffff, 0x1994, 0xfffffffb, 0xffffffff, 0x2, 0x5, 0xd23a, 0xd67, 0x1, 0x0, 0x1ff, 0xfff, 0x1f31, 0x78d, 0x8, 0x1, 0xfffffff7, 0x6, 0x9, 0x8, 0x20, 0x0, 0xecb, 0x20, 0xffffff80, 0x4, 0x1, 0x4, 0x4, 0x80000000, 0x2, 0x5, 0x7, 0x11a0, 0x200, 0x6, 0x100, 0x3, 0x30b2, 0x26, 0x7fffffff, 0x4, 0xb47, 0xffffffff, 0x0, 0x3f, 0x3, 0xbd, 0x200, 0x1, 0x8000, 0xf74, 0x3f, 0x7, 0x4, 0x7ff, 0x6, 0x98, 0x4, 0x1, 0xdae, 0x0, 0x6, 0xad86, 0xd6, 0x0, 0x3, 0x3, 0x3, 0x401, 0x1f, 0x9, 0xfffffce3, 0x1000, 0x40, 0xfffffff9, 0x80000001, 0x2, 0x7, 0x6d, 0x6f, 0x0, 0x5, 0xa777, 0x40100, 0x3, 0x40, 0x200, 0x9, 0x4, 0x4, 0x1f, 0x0, 0x683, 0xbbd0, 0x9, 0x3f, 0xfffffffa, 0x0, 0x7c72, 0x8, 0x7ff, 0x7, 0x6647, 0x6, 0x7, 0x41d9, 0x1, 0x4, 0x1, 0x4e1, 0x2, 0x3, 0x9, 0x5, 0x4, 0x7, 0x1, 0x2, 0x3, 0x6d, 0x4, 0x6, 0x2a, 0x3, 0x1, 0x52, 0x6, 0x2, 0x0, 0x80, 0x96, 0x33, 0x8001, 0x9, 0x9, 0x6, 0x8, 0x7, 0x80, 0xfffffffd, 0xfffffffe, 0x7, 0x5, 0x5, 0x4, 0x0, 0xffffffff, 0x8, 0x6, 0xfffffffb, 0x800, 0x8, 0x7, 0x1824a7c3, 0x800, 0x6, 0x3, 0x5c92, 0x5, 0x7fff, 0x10c2, 0xf7, 0x20, 0x1ff, 0x10000, 0xc8, 0x6c, 0x1, 0x7, 0x6, 0x3, 0x6, 0x2, 0x6, 0x81, 0x2, 0xe4e9e49, 0x3ff00, 0x191b, 0xa21, 0x4, 0x8001, 0x8, 0xffffffff, 0x3, 0x100, 0x1, 0x9, 0x56c5, 0xad21, 0x10001, 0x400, 0x8, 0xef3, 0x90, 0x6, 0x100, 0x2, 0x7, 0x6, 0x2, 0x8, 0x5, 0x7, 0x4, 0x8, 0x7, 0x8, 0x0, 0x6, 0x7, 0x80000001, 0x8, 0x8000, 0x3f, 0x864d, 0x460, 0x0, 0x5, 0x6, 0xfffffff7, 0x6, 0x8, 0x1, 0x34fd, 0xe5, 0x6, 0x5, 0x9, 0xfffffff9, 0xffffffff, 0x49, 0x8000, 0x0, 0x8bcd, 0xa4, 0x3, 0x1, 0x5, 0x3, 0x247b, 0x2, 0x80000000, 0xfff, 0x2, 0x101, 0x3, 0xfffffffb, 0xfffffffe, 0x5, 0x0, 0x8, 0x2, 0x9f5e, 0x5, 0x8, 0x100, 0x4, 0x5, 0x7, 0xf986, 0x4923, 0x4, 0x5, 0x0, 0x8, 0x4695, 0xff, 0x6, 0x1ed, 0x1, 0x2, 0x0, 0x80000000, 0x6, 0xffffff7f, 0x1, 0x2, 0x35, 0x24, 0x1, 0x6, 0x6, 0x3f, 0x9, 0x2, 0x100, 0x2, 0x2, 0x8, 0x20, 0xe953, 0x5, 0xffffffff, 0x3, 0x7ff, 0x1, 0x1, 0x81, 0xfff, 0x1, 0x2, 0x10001, 0x8, 0x4, 0xb99, 0x3, 0x4, 0xff, 0xfd6, 0x8, 0x8, 0x3ff, 0x3, 0x0, 0x2, 0x7, 0x26, 0x3, 0x0, 0x6, 0x10000, 0x7, 0x1, 0x3f, 0x8, 0x401, 0x75, 0x9, 0xfffffffd, 0x9b3, 0xfffffffd, 0x9, 0x7, 0x6, 0x3, 0x78f, 0x9, 0x8, 0x7, 0x6, 0x2, 0xffff2a8b, 0x7, 0x5eb, 0x9, 0x3ff, 0x2, 0x8, 0x8598, 0x7, 0x7, 0x1, 0x5, 0xe0, 0x410a, 0xa6b9, 0x2, 0x9, 0x789a, 0x9157, 0x9, 0x7ff, 0x4a5, 0x200, 0xfffffffe, 0x5, 0x3, 0x401, 0x80000001, 0xffff, 0x2, 0x8, 0x1ff, 0x23, 0x5, 0xfff, 0x4, 0xff, 0x4, 0x6, 0x5, 0x0, 0xc7, 0x800, 0x8767, 0x3, 0x48a, 0x6, 0x7, 0xafc, 0x0, 0x1000, 0xdc2d5d20, 0x27e, 0x0, 0x2, 0x128e, 0x8001, 0x20, 0x8, 0x0, 0x2, 0xfffffd1e, 0x2, 0x0, 0x455, 0x5, 0xc000, 0x8ad, 0x3, 0x9, 0xfffffffd, 0x1f, 0x7ff, 0x3, 0x7, 0x1, 0x9, 0x6, 0x4, 0x7fff, 0x4, 0x5, 0x7, 0xffff3d1d, 0x2, 0x8, 0xd45, 0x4, 0x6, 0xfff, 0xe7a, 0x3, 0x7ff, 0x3, 0xfffffff9, 0xe30d, 0x40, 0x8001, 0x7f, 0x1, 0x9, 0x5, 0x1b, 0x800, 0xe390, 0x4, 0x4, 0x80000, 0x8, 0x800, 0x7fffffff, 0x1, 0x9, 0x1, 0xa0, 0x0, 0x9, 0x800, 0x0, 0xf58f, 0x5, 0xfffffffb, 0x74, 0x7, 0x10000, 0xff, 0x656, 0x8000, 0x7, 0x1f, 0x7fff, 0x6, 0x7, 0x8, 0xc00, 0x0, 0x8, 0x5, 0x8, 0x34d80000, 0x4, 0x3, 0xd0bf, 0x7, 0x3, 0x200, 0x4, 0x9, 0x56e5, 0x1, 0x5, 0x6, 0x7, 0x8, 0x1, 0x62, 0x6, 0xdf0e, 0x3, 0x1, 0x4, 0xeb, 0x4, 0x1, 0x3a6, 0x1000, 0x7, 0x3, 0x0, 0x8001, 0x9, 0x800, 0x8d6, 0x4, 0x8, 0x8001, 0x6, 0xd3b, 0x200, 0x7, 0x1ff, 0x1, 0x1f, 0x7, 0xb24, 0x0, 0x0, 0x4, 0x8000, 0x1, 0xffffffff, 0x3, 0x9, 0x3, 0x9, 0x2373, 0x62, 0x700, 0x200, 0x6, 0x3, 0x0, 0xc5, 0x8, 0x3f, 0x4, 0xf64c, 0x4, 0x3, 0x5, 0xffffffff, 0x3, 0x4, 0xe, 0x5, 0x2, 0x7, 0x5, 0x1, 0x1, 0x1000, 0x4, 0x2ab9, 0x2, 0xffffffff, 0x62e, 0x5, 0x1f], 0x7, 0x400, 0x8, 0x7f}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) 23:20:34 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 23:20:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 3223.863392] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:20:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:34 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd626230b4387b52", 0x0, 0x2}, 0x20) 23:20:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x15, 0x1, 0x0, 0x0, @irqchip={0x6, 0x7}}, {0x8, 0x4, 0x0, 0x0, @msi={0x1, 0x0, 0x60, 0x40}}, {0x7, 0x4, 0x0, 0x0, @adapter={0x5, 0x4, 0x100, 0x5, 0x9d}}, {0x9, 0x4, 0x0, 0x0, @adapter={0x7, 0x4, 0x101, 0x200, 0x800}}, {0x80000001, 0x1, 0x0, 0x0, @adapter={0x4, 0xffffffffffffb335, 0x0, 0xffffffe0, 0x800}}, {0x6, 0x3, 0x0, 0x0, @msi={0xfffffff9, 0x6, 0x8e, 0xb1}}, {0x9, 0x3, 0x0, 0x0, @irqchip={0x1ff, 0xfffffffd}}, {0x5, 0x2, 0x0, 0x0, @sint={0x7fffffff}}, {0x1, 0x2, 0x0, 0x0, @msi={0x4, 0x10001, 0x1, 0x30}}, {0x56, 0x1, 0x0, 0x0, @adapter={0x1000, 0x9, 0xb893, 0x0, 0x5}}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 3224.001130] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:20:35 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd626230b4387b52", 0x0, 0x2}, 0x20) 23:20:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) 23:20:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:35 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd626230b4387b52", 0x0, 0x2}, 0x20) 23:20:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84caf1"], 0x2c}}, 0x0) 23:20:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 3224.153912] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:20:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair(0x23, 0xa, 0x9, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:35 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)="cfc38e2deb15e34e8cb52ecf231cc4fefcde25e21f5a61d0eecb8ead1ced11ec3aebe5f7052e9627e2e4757f4209252614f0405f4e1f6e7a7a18609cd26b8cdc692fd886c39a5f6e1279fe5ad917d58c26250b798c92822d31e4a22ffd68a0b98ec0c3bd626230b4387b52", &(0x7f0000000080)=@tcp}, 0x47) 23:20:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84"], 0x2c}}, 0x0) [ 3224.284281] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:20:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001000"], 0x2c}}, 0x0) 23:20:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 3224.342523] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:20:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) 23:20:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001000"], 0x2c}}, 0x0) 23:20:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001000"], 0x2c}}, 0x0) 23:20:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:35 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 23:20:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) 23:20:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5426}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1293c00000000000}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4dc4}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20c0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x3, 0xfff, 0x0, 0x41a, 0x1, 0x9a7, '\x00', 0x0, r1, 0x4, 0x1, 0x3}, 0x40) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 23:20:35 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) [ 3224.668253] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 23:20:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 3224.750320] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:20:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5426}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1293c00000000000}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4dc4}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20c0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x3, 0xfff, 0x0, 0x41a, 0x1, 0x9a7, '\x00', 0x0, r1, 0x4, 0x1, 0x3}, 0x40) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 23:20:35 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 23:20:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) 23:20:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x0, "8d98c1", 0x1, 0x7}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000040)={0x2, 0x390, 0xfff, 0x0, 0x80}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x0, 0x9, 0xff, 0x6, 0x7f, 0x6, 0x1f, 0x2, 0x2, 0x6, 0x3f, 0xfe, 0x20, 0x81, 0x5, 0x8}}) 23:20:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) [ 3224.944886] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:20:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:36 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000040)=0x1ff) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000000000009000000010000000000000000bbb3a3b000000007000000090000000700000000000000000000000000000000000000aa0000000200000000000000000000000700000000000000060000000000000001000000000000000200000005000000ff0300000300000000000000000000000900000000000000000001000000000003000000000000000000008007000000c5000000040000000000000000000000000100000300000000000000000000000000000000000000000000000000000003000000030000000000000000000000c0f6ffff0800000000000000000000000000000000000000000000000000000007000000030000000000000000000000f50d000000010000000000000000000000000000000200000000000000000000630d00000100000000000000000000000700000001000100"/344]) 23:20:36 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000040)=0x1ff) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000000000009000000010000000000000000bbb3a3b000000007000000090000000700000000000000000000000000000000000000aa0000000200000000000000000000000700000000000000060000000000000001000000000000000200000005000000ff0300000300000000000000000000000900000000000000000001000000000003000000000000000000008007000000c5000000040000000000000000000000000100000300000000000000000000000000000000000000000000000000000003000000030000000000000000000000c0f6ffff0800000000000000000000000000000000000000000000000000000007000000030000000000000000000000f50d000000010000000000000000000000000000000200000000000000000000630d00000100000000000000000000000700000001000100"/344]) 23:20:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/150, 0x96}, {&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/155, 0x9b}], 0x9, 0x0, 0x0, 0x20040085}, 0x40000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000000)={0x3ff, 0x0, 0x1ff, 0x1}) 23:20:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:36 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000040)=0x1ff) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000000000009000000010000000000000000bbb3a3b000000007000000090000000700000000000000000000000000000000000000aa0000000200000000000000000000000700000000000000060000000000000001000000000000000200000005000000ff0300000300000000000000000000000900000000000000000001000000000003000000000000000000008007000000c5000000040000000000000000000000000100000300000000000000000000000000000000000000000000000000000003000000030000000000000000000000c0f6ffff0800000000000000000000000000000000000000000000000000000007000000030000000000000000000000f50d000000010000000000000000000000000000000200000000000000000000630d00000100000000000000000000000700000001000100"/344]) 23:20:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/150, 0x96}, {&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/155, 0x9b}], 0x9, 0x0, 0x0, 0x20040085}, 0x40000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000018c0)={'sit0\x00', &(0x7f0000001840)={'ip6_vti0\x00', 0x0, 0x29, 0xdb, 0x3, 0x7, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x700, 0x0, 0x6}}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x218480, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000000), 0x4) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000080)=0x1, 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000100)=0x100000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000040)={0xe3d, 0x40}) 23:20:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000dc0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="67726530000000000000000000000000063c6211f555718e9f07b8146f8142a0fbce32361b0c41b507777d50d025b8b16cb50b1cdfae6e04b809e1ad7295ccddcabfa528bbeb7bcf093ac9f54e2bca913a06277299fc2bb8c927d1e4d5fa8ce35cd42469140db15e2805925488b7a89d08681fc74e37c24b4845e148c8634d31b04b2b489200"/149, @ANYRES32=0x0, @ANYBLOB="000700800000000300000001451d0014006800000929abcd361414bbe0000001"]}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000100)={0x5, &(0x7f0000000240)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @link_local}, {}, {}, {0x0, 0x0, 0x0, @multicast}]}) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x30a, 0x4, 0x4, 0x9, 0x63, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/150, 0x96}, {&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/155, 0x9b}], 0x9, 0x0, 0x0, 0x20040085}, 0x40000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000018c0)={'sit0\x00', &(0x7f0000001840)={'ip6_vti0\x00', 0x0, 0x29, 0xdb, 0x3, 0x7, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x700, 0x0, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a00)={'ip_vti0\x00', &(0x7f0000001900)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=r3, @ANYBLOB="78007800000000000000000843e800cc00660000802f9078e00000020a010101440c9b030a01010100000009890fc9ffffffffac1414aaac1e0101830ba4ac1414bb0a01010294040100831fd3e0000001ac14143f64010100ac14142aac1414aa7f000001ac1e0001441039800001000100000009000000019404010044349d23e00000010000000764010101000000057f000001000000057f00000100000000ac14142e000010000a0101000000e441831ff164010100ac1414aaac1e0101ffffffffac1e0001ac1414bbac1414aa89079cac1414aa00"]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/150, 0x96}, {&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/155, 0x9b}], 0x9, 0x0, 0x0, 0x20040085}, 0x40000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000018c0)={'sit0\x00', &(0x7f0000001840)={'ip6_vti0\x00', 0x0, 0x29, 0xdb, 0x3, 0x7, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x700, 0x0, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a00)={'ip_vti0\x00', &(0x7f0000001900)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=r3, @ANYBLOB="78007800000000000000000843e800cc00660000802f9078e00000020a010101440c9b030a01010100000009890fc9ffffffffac1414aaac1e0101830ba4ac1414bb0a01010294040100831fd3e0000001ac14143f64010100ac14142aac1414aa7f000001ac1e0001441039800001000100000009000000019404010044349d23e00000010000000764010101000000057f000001000000057f00000100000000ac14142e000010000a0101000000e441831ff164010100ac1414aaac1e0101ffffffffac1e0001ac1414bbac1414aa89079cac1414aa00"]}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:36 executing program 1: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, [0x0, 0x1, 0x0, 0x1]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x2, 0x9, 0x8, 0x1f, 0xcd, 0x0, 0x7, 0x7f, 0x2, 0xfc, 0xc2, 0x61, 0x100000000}, {0x20, 0x7ac8, 0xff, 0x7f, 0x20, 0x17, 0x4, 0xff, 0x40, 0x80, 0x4, 0x7f, 0x1000}, {0x1, 0x23c, 0x40, 0x40, 0x8, 0x1f, 0x4, 0x0, 0x3, 0x1f, 0x0, 0x5, 0x1}], 0x400}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 23:20:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/150, 0x96}, {&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/155, 0x9b}], 0x9, 0x0, 0x0, 0x20040085}, 0x40000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000018c0)={'sit0\x00', &(0x7f0000001840)={'ip6_vti0\x00', 0x0, 0x29, 0xdb, 0x3, 0x7, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x700, 0x0, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a00)={'ip_vti0\x00', &(0x7f0000001900)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=r3, @ANYBLOB="78007800000000000000000843e800cc00660000802f9078e00000020a010101440c9b030a01010100000009890fc9ffffffffac1414aaac1e0101830ba4ac1414bb0a01010294040100831fd3e0000001ac14143f64010100ac14142aac1414aa7f000001ac1e0001441039800001000100000009000000019404010044349d23e00000010000000764010101000000057f000001000000057f00000100000000ac14142e000010000a0101000000e441831ff164010100ac1414aaac1e0101ffffffffac1e0001ac1414bbac1414aa89079cac1414aa00"]}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:37 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0xfffffffffffffffd) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x200100) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000040)={&(0x7f0000000100)={{@host, 0x1}, {@hyper, 0xfffff08b}, 0x400, "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"}, 0x418, 0x3d}) r3 = syz_open_dev$audion(&(0x7f00000006c0), 0x6, 0x1) ioctl$KVM_ASSIGN_PCI_DEVICE(r3, 0x8040ae69, &(0x7f0000000700)={0x800, 0x400, 0x7f, 0x2, 0x3f}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r6, 0x7a9, &(0x7f00000005c0)={{@host, 0x1}, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x8, 0x1bfd, 0xa7bd, 0x8}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000680)={r2, 0x1ff, 0x8, r7}) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000080)={0x8, 0x7fffffff}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r8, 0x8070ae9f, &(0x7f0000000600)) 23:20:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/150, 0x96}, {&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/155, 0x9b}], 0x9, 0x0, 0x0, 0x20040085}, 0x40000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000018c0)={'sit0\x00', &(0x7f0000001840)={'ip6_vti0\x00', 0x0, 0x29, 0xdb, 0x3, 0x7, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x700, 0x0, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a00)={'ip_vti0\x00', &(0x7f0000001900)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=r3, @ANYBLOB="78007800000000000000000843e800cc00660000802f9078e00000020a010101440c9b030a01010100000009890fc9ffffffffac1414aaac1e0101830ba4ac1414bb0a01010294040100831fd3e0000001ac14143f64010100ac14142aac1414aa7f000001ac1e0001441039800001000100000009000000019404010044349d23e00000010000000764010101000000057f000001000000057f00000100000000ac14142e000010000a0101000000e441831ff164010100ac1414aaac1e0101ffffffffac1e0001ac1414bbac1414aa89079cac1414aa00"]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r4, &(0x7f0000001780)=@caif=@dbg, &(0x7f0000001800)=0x80) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/150, 0x96}, {&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/155, 0x9b}], 0x9, 0x0, 0x0, 0x20040085}, 0x40000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000018c0)={'sit0\x00', &(0x7f0000001840)={'ip6_vti0\x00', 0x0, 0x29, 0xdb, 0x3, 0x7, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x700, 0x0, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a00)={'ip_vti0\x00', &(0x7f0000001900)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=r3, @ANYBLOB="78007800000000000000000843e800cc00660000802f9078e00000020a010101440c9b030a01010100000009890fc9ffffffffac1414aaac1e0101830ba4ac1414bb0a01010294040100831fd3e0000001ac14143f64010100ac14142aac1414aa7f000001ac1e0001441039800001000100000009000000019404010044349d23e00000010000000764010101000000057f000001000000057f00000100000000ac14142e000010000a0101000000e441831ff164010100ac1414aaac1e0101ffffffffac1e0001ac1414bbac1414aa89079cac1414aa00"]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r4, &(0x7f0000001780)=@caif=@dbg, &(0x7f0000001800)=0x80) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000180)={[{0x4, 0xfff7, 0xf1, 0x8, 0x8, 0x20, 0x8, 0x0, 0x20, 0x9, 0xff, 0x6, 0xfff}, {0x7, 0x8, 0x7, 0x8, 0x1, 0x7d, 0x80, 0x6, 0x4d, 0xff, 0x3, 0x9, 0xfffffffffffffffe}, {0x8, 0xfff8, 0x80, 0x40, 0x5, 0x80, 0x8, 0x40, 0x9, 0x1, 0x3, 0x4, 0x4}], 0x1000}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$isdn_base(r1, &(0x7f0000000140)={0x22, 0x7, 0x1, 0x20, 0x80}, 0x6) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000100)={0x6, 0xa2, 0x2}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000080)={{&(0x7f0000000000)=""/63, 0x3f}, &(0x7f0000000040), 0x10}, 0x20) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 23:20:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x68, 0x5, 0x0, 0x0, @adapter={0x1000, 0x5, 0x2, 0x3}}, {0xff, 0x3, 0x0, 0x0, @sint={0x0, 0xbae7}}, {0x5c7f, 0x3, 0x0, 0x0, @irqchip={0x2, 0x7}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x5, 0x2, 0x3f, 0x83d1, 0xaf}}, {0x0, 0x3, 0x0, 0x0, @msi={0xffff, 0x4, 0x2, 0x8001}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x4ff9, 0x7f, 0x93, 0x7fff, 0x400}}, {0xaf, 0x2, 0x0, 0x0, @msi={0x2, 0x49e, 0xfca, 0x1b8c}}, {0x988, 0x3, 0x0, 0x0, @sint={0x3, 0xb2a}}, {0x8, 0x4, 0x0, 0x0, @msi={0xe14a, 0x9, 0x0, 0x8}}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x68, 0x5, 0x0, 0x0, @adapter={0x1000, 0x5, 0x2, 0x3}}, {0xff, 0x3, 0x0, 0x0, @sint={0x0, 0xbae7}}, {0x5c7f, 0x3, 0x0, 0x0, @irqchip={0x2, 0x7}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x5, 0x2, 0x3f, 0x83d1, 0xaf}}, {0x0, 0x3, 0x0, 0x0, @msi={0xffff, 0x4, 0x2, 0x8001}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x4ff9, 0x7f, 0x93, 0x7fff, 0x400}}, {0xaf, 0x2, 0x0, 0x0, @msi={0x2, 0x49e, 0xfca, 0x1b8c}}, {0x988, 0x3, 0x0, 0x0, @sint={0x3, 0xb2a}}, {0x8, 0x4, 0x0, 0x0, @msi={0xe14a, 0x9, 0x0, 0x8}}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:37 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000040)={[{0x7, 0x9, 0x1f, 0x3f, 0x80, 0x8, 0x9, 0x80, 0x98, 0x5, 0x70, 0x7, 0x6}, {0x6, 0x0, 0x7f, 0x1, 0x4, 0x0, 0x7, 0x6a, 0x3f, 0x3f, 0x9, 0x2, 0x8}, {0x67, 0x4, 0x81, 0x7, 0x3, 0x6, 0x3, 0x3, 0x8, 0x81, 0x18, 0x5}], 0x3}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0xa70, &(0x7f00000000c0)="bdaaaa5e8226ccdcc1ca035f8473cab69cda113f696bbc449b894a920051d13a6ae0642d7801274fd745a4157fac560e78291f5e68b8b65fee8696e581609cf96151561000ef423169dbb49d68d1dc18d9b2522d6f7f6f1e7341452e9825f9f921efb0e72c16eb79ad8717dcd204d5aa1c3189e4b3f4d29ab0d318f80c93917e74cd5bcede282fc55325a23156dc30b79216c0b636553f3be75f8b65ea5de4dc1dbec79f1cf8b1867aea6e4b97fb4212d55718d447c328aca3b66e3e3b02", &(0x7f0000000180)="1277671ef56911cbb6073dc8082bf6503d65c1a8c28868463022a23fee743ee31c8dd24d8134b91f05f23c210e18efd8702c9663b635fbbea63e02d0d75062c9be0a65fd1ddcd23b2df42d54c4d4d2", 0xbe, 0x4f}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6b8440, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000240)=0x7, 0x8) 23:20:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x68, 0x5, 0x0, 0x0, @adapter={0x1000, 0x5, 0x2, 0x3}}, {0xff, 0x3, 0x0, 0x0, @sint={0x0, 0xbae7}}, {0x5c7f, 0x3, 0x0, 0x0, @irqchip={0x2, 0x7}}, {0x1, 0x0, 0x0, 0x0, @adapter={0x5, 0x2, 0x3f, 0x83d1, 0xaf}}, {0x0, 0x3, 0x0, 0x0, @msi={0xffff, 0x4, 0x2, 0x8001}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x4ff9, 0x7f, 0x93, 0x7fff, 0x400}}, {0xaf, 0x2, 0x0, 0x0, @msi={0x2, 0x49e, 0xfca, 0x1b8c}}, {0x988, 0x3, 0x0, 0x0, @sint={0x3, 0xb2a}}, {0x8, 0x4, 0x0, 0x0, @msi={0xe14a, 0x9, 0x0, 0x8}}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@local, @in=@dev}}, {{@in6=@local}, 0x0, @in6=@private0}}, &(0x7f0000000400)=0xe8) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c7f0000000003000001045f118bf8e82a75a53546a6cae7c0ba52d5cc0befdc93c979814ec6073857b84da52286aa9c41dbd50000000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000800000006001d0000000000"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) getsockopt$netlink(r4, 0x10e, 0x8, &(0x7f0000000240)=""/46, &(0x7f0000000280)=0x2e) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34adc192e3faf2ba9f000000", @ANYRES16=r3, @ANYBLOB="200028bd7000fbdbdf25070000000500210000000000050005000000000008000c00010000000800110000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r5, 0x8040ae69, &(0x7f00000001c0)={0x7, 0x9, 0x2, 0x0, 0x1}) 23:20:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/150, 0x96}, {&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/155, 0x9b}], 0x9, 0x0, 0x0, 0x20040085}, 0x40000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000018c0)={'sit0\x00', &(0x7f0000001840)={'ip6_vti0\x00', 0x0, 0x29, 0xdb, 0x3, 0x7, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x700, 0x0, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a00)={'ip_vti0\x00', &(0x7f0000001900)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=r3, @ANYBLOB="78007800000000000000000843e800cc00660000802f9078e00000020a010101440c9b030a01010100000009890fc9ffffffffac1414aaac1e0101830ba4ac1414bb0a01010294040100831fd3e0000001ac14143f64010100ac14142aac1414aa7f000001ac1e0001441039800001000100000009000000019404010044349d23e00000010000000764010101000000057f000001000000057f00000100000000ac14142e000010000a0101000000e441831ff164010100ac1414aaac1e0101ffffffffac1e0001ac1414bbac1414aa89079cac1414aa00"]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r4, &(0x7f0000001780)=@caif=@dbg, &(0x7f0000001800)=0x80) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x100, 0x20480) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x100, 0x20480) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:37 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/10], 0xa) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f0000000100)=""/190, 0xbe}, &(0x7f0000000080), 0x11}, 0x20) 23:20:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xc5}, @L2TP_ATTR_RECV_SEQ={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x6008004}, 0x10) socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000016c0)={&(0x7f00000019c0)=ANY=[@ANYBLOB="8408000021b4ff1ed6bb473ef2f918a81e15717efc650d11f15e493c130493017290f146f8b0302b70cfb670e2cc", @ANYRES16=0x0, @ANYBLOB="000426bd7000ffdbdf2509000000280004802400078008000100200000000800010015000000080003000080000008000200020000001c000780080002000400000008000100010000000800020061ffffff2c000980080002000800000008000100ff070000080001000400000008000200040000000800020000000000"], 0x84}, 0x1, 0x0, 0x0, 0x14}, 0x8000) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x5}) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000001b80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001d80)={0x208, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x22, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x10}, @TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_ID={0x6f, 0x3, "e4f2329320ad786486aacbec365aa8cb9f385d1a57c2c4d7611b200d5c8f9c9160846beab86cf18aaa004a5d6b43f35783d76f6ba557210bccb850c3836f80f3ce27d58f40755b5d6a4c27a27e28b78e810e59bc89691ba7576726112bb334c41e7de40ade9a8db8f527de"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x135}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "c987e339cb6c9fbce77e608ef3195d2d772863b583746a465fb95464981d"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0xb0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2000000}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2cd1}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x800}, 0x4008881) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x3bc3e5fde40f4641}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x74, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffff80}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6d6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}]}, 0x74}}, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000001740)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001780)=0x10, 0x80000) sendto$llc(r3, &(0x7f00000017c0)="0dc0e3e63fa713c149d3073d5a224aa4ef2cdb63a964267e324331751a8135ba23290ee2e96224d5d3", 0x29, 0x8010, &(0x7f0000001800)={0x1a, 0x205, 0x20, 0x4, 0x5, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r4, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) clone(0x100, &(0x7f0000001c00)="c422b21513a1e281a7518c5cebce8137a1e3906ec19c572b3c9ca8903e19345072ee2a0f32d29c2bf69d5cd023d8063ba600a7f552a618d6ce49b619936ca5ec2d586e87dadeefeeba4b43543255d749fcb8307efe721a4b51a4fda3bc3827891750e7d49dcf45ab0b4d7dbafba42f3d2d7b1a7b20cf64966212e410d7b12b29514068c29a480c836bfaefb40c00c3ececffd572dc813817598de08e304c02391a6ade8e52234a72722a56", &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f0000001d40)="2aeffdb46829924cab358189d0a63a11054baf9fa4dce37271f87b84d389d5a2af171c9702e1586eaf906f6f") r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) bind$netlink(r5, &(0x7f0000001bc0)={0x10, 0x0, 0x25dfdbff, 0x10}, 0xc) sendmsg$rds(r4, &(0x7f0000001580)={&(0x7f0000000080)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000100)=""/240, 0xf0}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/252, 0xfc}, {&(0x7f0000000340)=""/187, 0xbb}, {&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x6, 0x0, 0x0, 0x800}, 0x10) 23:20:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:37 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) connect$rds(r1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 23:20:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:37 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) 23:20:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000040)={0x4, 0x0, 0x1}) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x5, 0x5, 0x2, 0x80, 0x2, 0x1f, 0x1f, 0x62, 0x1, 0x5, 0x7, 0xd2, 0x1f, 0x5e, 0x0, 0x3}}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x9}) r3 = accept(r0, 0x0, &(0x7f0000000380)) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000003c0)=0x700000, 0x8) 23:20:38 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0x0, 0x8001, 0x7}}}, 0x9) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000140)={@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0xde, @private0={0xfc, 0x0, '\x00', 0x1}, 0x101}}, {&(0x7f0000000080)=""/98, 0x62}, &(0x7f0000000100), 0x34}, 0xa0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 23:20:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x20, 0x7, 0x9, 0x1, {{0x18, 0x4, 0x0, 0x3, 0x60, 0x67, 0x0, 0x20, 0x0, 0x0, @multicast2, @multicast1, {[@end, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0xc3, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @multicast2]}, @cipso={0x86, 0x34, 0xffffffffffffffff, [{0x1, 0x2}, {0x1, 0x8, "9693140ba8c4"}, {0x2, 0x2}, {0x1, 0xe, "4dce8c110e01e3f676414615"}, {0x7, 0xf, "83fb2a9ad6f89e8f819b3e1713"}, {0x0, 0x5, "268df4"}]}]}}}}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x6, 0x1b, 0x7e, 0x48, 0x80, 0x8, 0x5, 0x0, 0x71, 0x9, 0x9, 0x6, 0x11, 0x80, 0xe3, 0x2}}) 23:20:38 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0x0, 0x8001, 0x7}}}, 0x9) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000140)={@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0xde, @private0={0xfc, 0x0, '\x00', 0x1}, 0x101}}, {&(0x7f0000000080)=""/98, 0x62}, &(0x7f0000000100), 0x34}, 0xa0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 23:20:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x4, 0x10}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$llc(r2, &(0x7f0000000080)={0x1a, 0x201, 0x8, 0x5e, 0x9, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000100)=""/153) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000040)={0x5}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2e581, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 23:20:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x1c0, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5d77}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xe1f5, @mcast1, 0x3c9af1f6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "5dccc758724366462c32167bcfb9577ad16d1feb7d4149203d5fff6959"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "ae4567f90f0a9ca6779a216c605ccf94d6aef09bd7214b5460c2852a81a0dcebbd7481"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "fc9fc35fc756ef79be91a76d86d9425857a011c419db78b0ba78f0e2f5"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}]}, @TIPC_NLA_NODE={0x4}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4}, 0x10) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x8000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000440)=0x80) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) setsockopt$llc_int(r4, 0x10c, 0x5, &(0x7f0000000000)=0x800, 0x4) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x40002) 23:20:38 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0xffff, 0x1, 0xffffffff, 0x4]}) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0xb7, 0x0, 0x3, 0x7, 0x6d, 0x0, 0x3, 0x3, 0x20, 0x0, 0x6, 0x1f, 0x1}, {0x6, 0x8, 0x9, 0x7, 0x9, 0x2, 0x1f, 0x7, 0x7, 0x9, 0x0, 0x1, 0x1}, {0x7, 0x40, 0x7, 0x7, 0x4, 0x20, 0x80, 0x4, 0x3f, 0x80, 0xf7, 0x1, 0xed2}], 0xfffffffb}) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0x1f, 0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000000)={{0x0, 0x8}, 0x4}, 0x10) 23:20:38 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0x0, 0x8001, 0x7}}}, 0x9) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000140)={@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0xde, @private0={0xfc, 0x0, '\x00', 0x1}, 0x101}}, {&(0x7f0000000080)=""/98, 0x62}, &(0x7f0000000100), 0x34}, 0xa0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 23:20:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x8) 23:20:38 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0xffff, 0x1, 0xffffffff, 0x4]}) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0xb7, 0x0, 0x3, 0x7, 0x6d, 0x0, 0x3, 0x3, 0x20, 0x0, 0x6, 0x1f, 0x1}, {0x6, 0x8, 0x9, 0x7, 0x9, 0x2, 0x1f, 0x7, 0x7, 0x9, 0x0, 0x1, 0x1}, {0x7, 0x40, 0x7, 0x7, 0x4, 0x20, 0x80, 0x4, 0x3f, 0x80, 0xf7, 0x1, 0xed2}], 0xfffffffb}) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0x1f, 0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000000)={{0x0, 0x8}, 0x4}, 0x10) 23:20:38 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0x0, 0x8001, 0x7}}}, 0x9) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000140)={@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0xde, @private0={0xfc, 0x0, '\x00', 0x1}, 0x101}}, {&(0x7f0000000080)=""/98, 0x62}, &(0x7f0000000100), 0x34}, 0xa0) [ 3227.402411] RDS: rds_bind could not find a transport for 172.20.20.187, load rds_tcp or rds_rdma? 23:20:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2e581, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 23:20:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:38 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@bridge_getvlan={0x50, 0x72, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0xce5ed53b6a8e04fb}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000100) inotify_rm_watch(0xffffffffffffffff, r2) [ 3227.520572] RDS: rds_bind could not find a transport for 172.20.20.187, load rds_tcp or rds_rdma? 23:20:38 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0x0, 0x8001, 0x7}}}, 0x9) 23:20:38 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0xffff, 0x1, 0xffffffff, 0x4]}) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0xb7, 0x0, 0x3, 0x7, 0x6d, 0x0, 0x3, 0x3, 0x20, 0x0, 0x6, 0x1f, 0x1}, {0x6, 0x8, 0x9, 0x7, 0x9, 0x2, 0x1f, 0x7, 0x7, 0x9, 0x0, 0x1, 0x1}, {0x7, 0x40, 0x7, 0x7, 0x4, 0x20, 0x80, 0x4, 0x3f, 0x80, 0xf7, 0x1, 0xed2}], 0xfffffffb}) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0x1f, 0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000000)={{0x0, 0x8}, 0x4}, 0x10) 23:20:38 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 3227.663555] RDS: rds_bind could not find a transport for 172.20.20.187, load rds_tcp or rds_rdma? 23:20:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x8) 23:20:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d"], 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}]}, 0x1c}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x18c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf78}]}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x8e, 0x3, "b5c26006174f657d688436af52a312902c2ed0d7b6a1023bd27e051caba129e42992451e2dbbc843e6d3b1c38189795fb8248c734fff734b2a4bfed9566d233566c4c4ccad0ad3c5fe7557698f2c71ccb8196d75ea2f5f9de057c099f792c7738133c97023b13498107da7417d098e23c5056119ac581985284f698260102801a525c699940d08b18ab9"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x48000}, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000024c0)={'syztnl0\x00', 0x0}) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x44, r2, 0x118, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40050) 23:20:38 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) 23:20:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000040)={0x94, 0x7818}) r3 = syz_open_dev$audion(&(0x7f0000000380), 0x5, 0x12680) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3ffffd) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x408000, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000440)=""/158) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000100)) r5 = syz_open_dev$audion(&(0x7f0000000080), 0x1, 0x500) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000340)={0x1fe, 0x0, &(0x7f0000fff000/0x1000)=nil}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r3, 0x7a9, &(0x7f0000000400)={{@host, 0x1}, 0x4, 0x0, 0x7, 0xb4, 0x0, 0x7fff, 0x2, 0x7}) 23:20:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:38 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@bridge_getvlan={0x50, 0x72, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0xce5ed53b6a8e04fb}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000100) inotify_rm_watch(0xffffffffffffffff, r2) 23:20:38 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:38 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x3) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000100)={0x1, ' '}, 0x2) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) 23:20:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:38 executing program 4: socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000180)={[{0x10006, 0x0, 0x80, 0x0, 0x5, 0x81, 0x11, 0x3, 0x1, 0x0, 0xaf, 0x8, 0x4}, {0x0, 0x0, 0x1, 0x8, 0x3, 0x1, 0x1f, 0x0, 0x7f, 0xa0, 0x1d, 0x9, 0x9}, {0x2, 0x401, 0x40, 0x0, 0x6, 0x2d, 0x8, 0x1, 0x5, 0xf7, 0x0, 0x9, 0x6}]}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011007d", @ANYRESHEX], 0x2c}}, 0x0) 23:20:38 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1cda0b6bf06a0ed7b9cbfd4d7b4d2ef226"], 0x1c}}, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000000)={0x5, 0x7}) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec, r0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xf05}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x13e5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x536}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfd1a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x11) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000280)={{@host, 0x9}, @my=0x1, 0x0, 0xffff, 0x7f, 0x5, 0x1, 0x9, 0x6}) [ 3227.978099] RDS: rds_bind could not find a transport for 224.0.0.1, load rds_tcp or rds_rdma? 23:20:39 executing program 4: socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:39 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) socket$inet(0x2, 0x3, 0x8000) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) [ 3228.078234] nla_parse: 2 callbacks suppressed [ 3228.078241] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 23:20:39 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000000)={{0x5, 0x7}, 0x18}, 0x10) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) 23:20:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xec, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe1d1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x77}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x8820}, 0x4000000) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 23:20:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r2, &(0x7f0000000040)={0x22, 0x1f, 0x0, 0x1f, 0x7}, 0x6) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:39 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) socket$inet(0x2, 0x3, 0x8000) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) 23:20:39 executing program 4: socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000040)={0x94, 0x7818}) r3 = syz_open_dev$audion(&(0x7f0000000380), 0x5, 0x12680) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3ffffd) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x408000, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000440)=""/158) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000100)) r5 = syz_open_dev$audion(&(0x7f0000000080), 0x1, 0x500) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000340)={0x1fe, 0x0, &(0x7f0000fff000/0x1000)=nil}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r3, 0x7a9, &(0x7f0000000400)={{@host, 0x1}, 0x4, 0x0, 0x7, 0xb4, 0x0, 0x7fff, 0x2, 0x7}) 23:20:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:39 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) socket$inet(0x2, 0x3, 0x8000) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) 23:20:39 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:39 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) socket$inet(0x2, 0x3, 0x8000) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) 23:20:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x8, 0x7, 0x48, 0x59, 0xa6, 0x20, 0x80, 0x3, 0x3, 0x5, 0x7, 0x8, 0x80}, {0x8, 0x7f, 0x6, 0x6, 0x2, 0x80, 0x0, 0x0, 0x25, 0xff, 0x6, 0xed, 0x4}, {0x0, 0x131, 0x2, 0x3, 0x81, 0x6, 0x1c, 0x3f, 0x81, 0x40, 0x1, 0x9, 0x800}], 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:39 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xec, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe1d1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x77}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x8820}, 0x4000000) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 23:20:39 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:39 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:39 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) socket$inet(0x2, 0x3, 0x8000) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) 23:20:39 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:39 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) socket$inet(0x2, 0x3, 0x8000) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) 23:20:39 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000080), 0x3f, 0xe147dde035349629) connect$rds(r3, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_ifreq(r2, 0x8994, &(0x7f0000000140)={'batadv0\x00', @ifru_ivalue}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0xa, 0x4) 23:20:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000040)={0x94, 0x7818}) r3 = syz_open_dev$audion(&(0x7f0000000380), 0x5, 0x12680) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3ffffd) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x408000, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000440)=""/158) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000100)) r5 = syz_open_dev$audion(&(0x7f0000000080), 0x1, 0x500) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000340)={0x1fe, 0x0, &(0x7f0000fff000/0x1000)=nil}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r3, 0x7a9, &(0x7f0000000400)={{@host, 0x1}, 0x4, 0x0, 0x7, 0xb4, 0x0, 0x7fff, 0x2, 0x7}) 23:20:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 23:20:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x8, 0x7, 0x48, 0x59, 0xa6, 0x20, 0x80, 0x3, 0x3, 0x5, 0x7, 0x8, 0x80}, {0x8, 0x7f, 0x6, 0x6, 0x2, 0x80, 0x0, 0x0, 0x25, 0xff, 0x6, 0xed, 0x4}, {0x0, 0x131, 0x2, 0x3, 0x81, 0x6, 0x1c, 0x3f, 0x81, 0x40, 0x1, 0x9, 0x800}], 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 23:20:39 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) 23:20:39 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 23:20:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 23:20:39 executing program 3: setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) 23:20:39 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 23:20:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 23:20:39 executing program 3: setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) 23:20:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x8, 0x7, 0x48, 0x59, 0xa6, 0x20, 0x80, 0x3, 0x3, 0x5, 0x7, 0x8, 0x80}, {0x8, 0x7f, 0x6, 0x6, 0x2, 0x80, 0x0, 0x0, 0x25, 0xff, 0x6, 0xed, 0x4}, {0x0, 0x131, 0x2, 0x3, 0x81, 0x6, 0x1c, 0x3f, 0x81, 0x40, 0x1, 0x9, 0x800}], 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:40 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 23:20:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x8, 0x7, 0x48, 0x59, 0xa6, 0x20, 0x80, 0x3, 0x3, 0x5, 0x7, 0x8, 0x80}, {0x8, 0x7f, 0x6, 0x6, 0x2, 0x80, 0x0, 0x0, 0x25, 0xff, 0x6, 0xed, 0x4}, {0x0, 0x131, 0x2, 0x3, 0x81, 0x6, 0x1c, 0x3f, 0x81, 0x40, 0x1, 0x9, 0x800}], 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:40 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 23:20:40 executing program 3: setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) 23:20:40 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000040)={0x401, 0x800, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x420100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000000), 0x69, 0x400) connect$llc(r3, &(0x7f0000000080)={0x1a, 0x100, 0x2, 0xa3, 0x5, 0x2, @remote}, 0x10) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000100)=""/159) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 23:20:40 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 23:20:40 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) 23:20:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:40 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 23:20:40 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) 23:20:40 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 23:20:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x8, 0x7, 0x48, 0x59, 0xa6, 0x20, 0x80, 0x3, 0x3, 0x5, 0x7, 0x8, 0x80}, {0x8, 0x7f, 0x6, 0x6, 0x2, 0x80, 0x0, 0x0, 0x25, 0xff, 0x6, 0xed, 0x4}, {0x0, 0x131, 0x2, 0x3, 0x81, 0x6, 0x1c, 0x3f, 0x81, 0x40, 0x1, 0x9, 0x800}], 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000000)={0x7fd, 0x0, 0x3}) 23:20:40 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) connect$rds(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) 23:20:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000100), 0x9, 0x40180) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000140)={0x1000, 0x2000}) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000000)={0x200, 0x0, 0x0, 0x400}) r4 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000180)={0x7, 0x10001}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:40 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) 23:20:40 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) 23:20:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x103) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000000)=0x2000) 23:20:40 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 23:20:40 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) 23:20:40 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 23:20:40 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:40 executing program 4 (fault-call:3 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 3229.625408] FAULT_INJECTION: forcing a failure. [ 3229.625408] name failslab, interval 1, probability 0, space 0, times 0 [ 3229.640807] CPU: 1 PID: 29153 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 3229.648718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3229.658077] Call Trace: [ 3229.660686] dump_stack+0x1b2/0x281 [ 3229.664418] should_fail.cold+0x10a/0x149 [ 3229.668581] should_failslab+0xd6/0x130 [ 3229.672654] kmem_cache_alloc_node+0x263/0x410 [ 3229.677247] __alloc_skb+0x5c/0x510 [ 3229.680975] mgmt_send_event+0x42/0x330 [ 3229.684976] ? mgmt_pending_foreach+0x27/0x120 [ 3229.689572] mgmt_index_removed+0x200/0x240 [ 3229.693895] ? mgmt_index_added+0x210/0x210 [ 3229.698217] ? _raw_read_unlock+0x29/0x40 [ 3229.702362] ? hci_dev_get+0xe6/0x190 [ 3229.706161] hci_sock_bind+0xce1/0x1170 [ 3229.710136] ? hci_sock_ioctl+0x690/0x690 [ 3229.714290] ? security_socket_bind+0x83/0xb0 [ 3229.718789] SyS_bind+0x174/0x1f0 [ 3229.722244] ? SyS_socketpair+0x480/0x480 [ 3229.726399] ? wait_for_completion_io+0x10/0x10 [ 3229.731070] ? vfs_write+0x319/0x4d0 [ 3229.733509] FAULT_INJECTION: forcing a failure. [ 3229.733509] name failslab, interval 1, probability 0, space 0, times 0 [ 3229.734781] ? fput+0xb/0x140 [ 3229.734789] ? SyS_write+0x14d/0x210 [ 3229.734802] ? SyS_read+0x210/0x210 [ 3229.756407] ? __do_page_fault+0x159/0xad0 [ 3229.760658] ? do_syscall_64+0x4c/0x640 [ 3229.764635] ? SyS_socketpair+0x480/0x480 [ 3229.768808] do_syscall_64+0x1d5/0x640 23:20:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0xf216, 0x5}) 23:20:40 executing program 2 (fault-call:1 fault-nth:0): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84"], 0x2c}}, 0x0) 23:20:40 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) 23:20:40 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) [ 3229.772698] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3229.777880] RIP: 0033:0x4665f9 [ 3229.781059] RSP: 002b:00007fa438e83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 3229.788761] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3229.796027] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 3229.803280] RBP: 00007fa438e831d0 R08: 0000000000000000 R09: 0000000000000000 [ 3229.810546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3229.817798] R13: 00007ffd32a5989f R14: 00007fa438e83300 R15: 0000000000022000 23:20:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 3229.825068] CPU: 0 PID: 29155 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 3229.832959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3229.842314] Call Trace: [ 3229.844910] dump_stack+0x1b2/0x281 [ 3229.848561] should_fail.cold+0x10a/0x149 [ 3229.852719] should_failslab+0xd6/0x130 [ 3229.856702] kmem_cache_alloc+0x28e/0x3c0 [ 3229.860861] vmx_create_vcpu+0x87/0x29d0 [ 3229.864931] ? trace_hardirqs_on+0x10/0x10 [ 3229.869186] ? __mutex_unlock_slowpath+0x75/0x770 [ 3229.874037] ? _kstrtoull+0x134/0x350 [ 3229.877849] ? vmx_free_vcpu+0x2f0/0x2f0 [ 3229.881919] kvm_vm_ioctl+0x4ca/0x13e0 [ 3229.885819] ? kvm_vcpu_release+0xa0/0xa0 [ 3229.889977] ? get_pid_task+0xb8/0x130 [ 3229.893871] ? proc_fail_nth_write+0x7b/0x180 [ 3229.898373] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 3229.903307] ? trace_hardirqs_on+0x10/0x10 [ 3229.907549] ? fsnotify+0x974/0x11b0 [ 3229.911261] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 3229.916177] ? __handle_mm_fault+0x80f/0x4620 [ 3229.920659] ? SyS_write+0x1b7/0x210 [ 3229.924358] ? kvm_vcpu_release+0xa0/0xa0 [ 3229.928489] do_vfs_ioctl+0x75a/0xff0 [ 3229.932271] ? ioctl_preallocate+0x1a0/0x1a0 [ 3229.936659] ? lock_downgrade+0x740/0x740 [ 3229.940787] ? __fget+0x225/0x360 [ 3229.944219] ? do_vfs_ioctl+0xff0/0xff0 [ 3229.948178] ? security_file_ioctl+0x83/0xb0 [ 3229.952565] SyS_ioctl+0x7f/0xb0 [ 3229.955910] ? do_vfs_ioctl+0xff0/0xff0 [ 3229.959866] do_syscall_64+0x1d5/0x640 [ 3229.963748] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3229.968916] RIP: 0033:0x4665f9 23:20:40 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) [ 3229.972085] RSP: 002b:00007fa36f29e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3229.979860] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3229.987107] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 3229.994359] RBP: 00007fa36f29e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3230.001871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3230.009117] R13: 00007ffee4e8528f R14: 00007fa36f29e300 R15: 0000000000022000 23:20:41 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) [ 3230.053188] FAULT_INJECTION: forcing a failure. [ 3230.053188] name failslab, interval 1, probability 0, space 0, times 0 [ 3230.075882] FAULT_INJECTION: forcing a failure. [ 3230.075882] name failslab, interval 1, probability 0, space 0, times 0 [ 3230.097934] CPU: 0 PID: 29179 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 3230.105852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3230.115212] Call Trace: [ 3230.117821] dump_stack+0x1b2/0x281 [ 3230.121480] should_fail.cold+0x10a/0x149 [ 3230.125654] should_failslab+0xd6/0x130 [ 3230.129642] kmem_cache_alloc_node+0x263/0x410 [ 3230.134275] __alloc_skb+0x5c/0x510 [ 3230.137917] netlink_sendmsg+0x901/0xb80 [ 3230.141988] ? nlmsg_notify+0x170/0x170 [ 3230.145964] ? kernel_recvmsg+0x210/0x210 [ 3230.150120] ? security_socket_sendmsg+0x83/0xb0 [ 3230.154879] ? nlmsg_notify+0x170/0x170 [ 3230.158855] sock_sendmsg+0xb5/0x100 [ 3230.162573] ___sys_sendmsg+0x6c8/0x800 [ 3230.166546] ? get_pid_task+0x91/0x130 [ 3230.170433] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 3230.175209] ? lock_downgrade+0x740/0x740 [ 3230.179362] ? __fget+0x1fe/0x360 [ 3230.182820] ? lock_acquire+0x170/0x3f0 [ 3230.186832] ? lock_downgrade+0x740/0x740 [ 3230.190991] ? __fget+0x225/0x360 [ 3230.194454] ? __fdget+0x196/0x1f0 [ 3230.197998] ? sockfd_lookup_light+0xb2/0x160 [ 3230.202497] __sys_sendmsg+0xa3/0x120 [ 3230.206294] ? SyS_shutdown+0x160/0x160 [ 3230.210368] ? wait_for_completion_io+0x10/0x10 [ 3230.215040] ? SyS_read+0x210/0x210 [ 3230.218662] ? __do_page_fault+0x159/0xad0 [ 3230.222887] SyS_sendmsg+0x27/0x40 [ 3230.226407] ? __sys_sendmsg+0x120/0x120 [ 3230.231072] do_syscall_64+0x1d5/0x640 [ 3230.234943] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3230.240114] RIP: 0033:0x4665f9 [ 3230.243282] RSP: 002b:00007fe3be0ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 23:20:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101201, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000100)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x28}, 0x10) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000004c0)) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000480)={0x69}) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x6) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0], 0xb4}, 0x1, 0x0, 0x0, 0x24040051}, 0x10) [ 3230.250971] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3230.258219] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3230.265554] RBP: 00007fe3be0ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3230.272803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3230.280066] R13: 00007fff80a69a4f R14: 00007fe3be0ff300 R15: 0000000000022000 [ 3230.290306] CPU: 0 PID: 29181 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 3230.298225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3230.307827] Call Trace: [ 3230.310427] dump_stack+0x1b2/0x281 [ 3230.314063] should_fail.cold+0x10a/0x149 [ 3230.318225] should_failslab+0xd6/0x130 [ 3230.322217] kmem_cache_alloc_node_trace+0x25a/0x400 [ 3230.327679] __kmalloc_node_track_caller+0x38/0x70 [ 3230.332709] __alloc_skb+0x96/0x510 [ 3230.336348] mgmt_send_event+0x42/0x330 [ 3230.340418] ? mgmt_pending_foreach+0x27/0x120 [ 3230.345009] mgmt_index_removed+0x200/0x240 [ 3230.349349] ? mgmt_index_added+0x210/0x210 [ 3230.353678] ? _raw_read_unlock+0x29/0x40 [ 3230.357832] ? hci_dev_get+0xe6/0x190 [ 3230.361638] hci_sock_bind+0xce1/0x1170 [ 3230.365618] ? hci_sock_ioctl+0x690/0x690 [ 3230.369875] ? security_socket_bind+0x83/0xb0 [ 3230.374361] SyS_bind+0x174/0x1f0 [ 3230.377815] ? SyS_socketpair+0x480/0x480 [ 3230.381951] ? wait_for_completion_io+0x10/0x10 [ 3230.386607] ? vfs_write+0x319/0x4d0 [ 3230.390304] ? fput+0xb/0x140 [ 3230.393390] ? SyS_write+0x14d/0x210 [ 3230.397081] ? SyS_read+0x210/0x210 [ 3230.400697] ? __do_page_fault+0x159/0xad0 [ 3230.404912] ? do_syscall_64+0x4c/0x640 [ 3230.408864] ? SyS_socketpair+0x480/0x480 [ 3230.412991] do_syscall_64+0x1d5/0x640 [ 3230.416865] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3230.422047] RIP: 0033:0x4665f9 [ 3230.425233] RSP: 002b:00007fa438e83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 3230.432921] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3230.440171] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 3230.447428] RBP: 00007fa438e831d0 R08: 0000000000000000 R09: 0000000000000000 23:20:41 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) 23:20:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10000004) [ 3230.454677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3230.462012] R13: 00007ffd32a5989f R14: 00007fa438e83300 R15: 0000000000022000 23:20:41 executing program 0 (fault-call:1 fault-nth:2): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:41 executing program 2 (fault-call:1 fault-nth:1): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84"], 0x2c}}, 0x0) [ 3230.571116] FAULT_INJECTION: forcing a failure. [ 3230.571116] name failslab, interval 1, probability 0, space 0, times 0 [ 3230.582451] CPU: 1 PID: 29205 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 3230.590427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3230.599788] Call Trace: [ 3230.602387] dump_stack+0x1b2/0x281 [ 3230.604643] FAULT_INJECTION: forcing a failure. [ 3230.604643] name failslab, interval 1, probability 0, space 0, times 0 [ 3230.606022] should_fail.cold+0x10a/0x149 [ 3230.606041] should_failslab+0xd6/0x130 [ 3230.606054] kmem_cache_alloc+0x40/0x3c0 [ 3230.606071] skb_clone+0x126/0x9a0 [ 3230.632942] hci_send_to_channel+0x135/0x200 [ 3230.637333] mgmt_send_event+0x246/0x330 [ 3230.641376] mgmt_index_removed+0x200/0x240 [ 3230.645690] ? mgmt_index_added+0x210/0x210 [ 3230.649991] ? _raw_read_unlock+0x29/0x40 [ 3230.654116] ? hci_dev_get+0xe6/0x190 [ 3230.657894] hci_sock_bind+0xce1/0x1170 [ 3230.661860] ? hci_sock_ioctl+0x690/0x690 [ 3230.665996] ? security_socket_bind+0x83/0xb0 [ 3230.670473] SyS_bind+0x174/0x1f0 [ 3230.673904] ? SyS_socketpair+0x480/0x480 [ 3230.678034] ? wait_for_completion_io+0x10/0x10 [ 3230.682698] ? vfs_write+0x319/0x4d0 [ 3230.686413] ? fput+0xb/0x140 [ 3230.689500] ? SyS_write+0x14d/0x210 [ 3230.693204] ? SyS_read+0x210/0x210 [ 3230.696810] ? __do_page_fault+0x159/0xad0 [ 3230.701034] ? do_syscall_64+0x4c/0x640 [ 3230.704985] ? SyS_socketpair+0x480/0x480 [ 3230.709123] do_syscall_64+0x1d5/0x640 [ 3230.712997] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3230.718168] RIP: 0033:0x4665f9 [ 3230.721349] RSP: 002b:00007fa438e83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 3230.729050] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3230.736300] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 3230.743559] RBP: 00007fa438e831d0 R08: 0000000000000000 R09: 0000000000000000 [ 3230.750808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3230.758076] R13: 00007ffd32a5989f R14: 00007fa438e83300 R15: 0000000000022000 [ 3230.790551] CPU: 0 PID: 29210 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 3230.798488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3230.807840] Call Trace: [ 3230.810425] dump_stack+0x1b2/0x281 [ 3230.814036] should_fail.cold+0x10a/0x149 [ 3230.818776] should_failslab+0xd6/0x130 [ 3230.822735] kmem_cache_alloc_node_trace+0x25a/0x400 [ 3230.827820] __kmalloc_node_track_caller+0x38/0x70 [ 3230.832740] __alloc_skb+0x96/0x510 [ 3230.836448] netlink_sendmsg+0x901/0xb80 [ 3230.840502] ? nlmsg_notify+0x170/0x170 [ 3230.844457] ? kernel_recvmsg+0x210/0x210 [ 3230.848587] ? security_socket_sendmsg+0x83/0xb0 [ 3230.853322] ? nlmsg_notify+0x170/0x170 [ 3230.857310] sock_sendmsg+0xb5/0x100 [ 3230.861025] ___sys_sendmsg+0x6c8/0x800 [ 3230.864979] ? get_pid_task+0x91/0x130 [ 3230.868845] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 3230.873583] ? lock_downgrade+0x740/0x740 [ 3230.877712] ? __fget+0x1fe/0x360 [ 3230.881163] ? lock_acquire+0x170/0x3f0 [ 3230.885141] ? lock_downgrade+0x740/0x740 [ 3230.889280] ? __fget+0x225/0x360 [ 3230.892726] ? __fdget+0x196/0x1f0 [ 3230.896251] ? sockfd_lookup_light+0xb2/0x160 [ 3230.900739] __sys_sendmsg+0xa3/0x120 [ 3230.904520] ? SyS_shutdown+0x160/0x160 [ 3230.908486] ? wait_for_completion_io+0x10/0x10 [ 3230.913225] ? SyS_read+0x210/0x210 [ 3230.916833] ? __do_page_fault+0x159/0xad0 [ 3230.921050] SyS_sendmsg+0x27/0x40 [ 3230.924609] ? __sys_sendmsg+0x120/0x120 [ 3230.928649] do_syscall_64+0x1d5/0x640 [ 3230.932530] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3230.937713] RIP: 0033:0x4665f9 23:20:41 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) 23:20:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:41 executing program 2 (fault-call:1 fault-nth:2): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84"], 0x2c}}, 0x0) [ 3230.940881] RSP: 002b:00007fe3be0ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3230.948588] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3230.955837] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3230.963106] RBP: 00007fe3be0ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3230.970528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3230.981074] R13: 00007fff80a69a4f R14: 00007fe3be0ff300 R15: 0000000000022000 23:20:41 executing program 4: syz_open_dev$audion(&(0x7f0000000180), 0x4, 0xc0380) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x937dec09d31b8c03) 23:20:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_getneigh={0x38, 0x1e, 0x800, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x2118, 0x20000}, [@IFLA_LINKMODE={0x5, 0x11, 0x5}, @IFLA_CARRIER={0x5, 0x21, 0x7}, @IFLA_LINK_NETNSID={0x8, 0x25, 0xb79}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000400) 23:20:42 executing program 0 (fault-call:1 fault-nth:3): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:42 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, 0x0, 0x0) [ 3231.094365] FAULT_INJECTION: forcing a failure. [ 3231.094365] name failslab, interval 1, probability 0, space 0, times 0 [ 3231.149369] FAULT_INJECTION: forcing a failure. [ 3231.149369] name failslab, interval 1, probability 0, space 0, times 0 [ 3231.160749] CPU: 0 PID: 29239 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 3231.168987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3231.178522] Call Trace: [ 3231.181139] dump_stack+0x1b2/0x281 [ 3231.184770] should_fail.cold+0x10a/0x149 [ 3231.188939] should_failslab+0xd6/0x130 [ 3231.193028] kmem_cache_alloc+0x40/0x3c0 [ 3231.197086] skb_clone+0x126/0x9a0 [ 3231.200619] hci_send_to_channel+0x135/0x200 [ 3231.205017] mgmt_send_event+0x246/0x330 [ 3231.209416] mgmt_index_removed+0x200/0x240 [ 3231.213721] ? mgmt_index_added+0x210/0x210 [ 3231.218120] ? _raw_read_unlock+0x29/0x40 [ 3231.222355] ? hci_dev_get+0xe6/0x190 [ 3231.226328] hci_sock_bind+0xce1/0x1170 [ 3231.230381] ? hci_sock_ioctl+0x690/0x690 [ 3231.234509] ? security_socket_bind+0x83/0xb0 [ 3231.239000] SyS_bind+0x174/0x1f0 [ 3231.242434] ? SyS_socketpair+0x480/0x480 [ 3231.246649] ? wait_for_completion_io+0x10/0x10 [ 3231.251298] ? vfs_write+0x319/0x4d0 [ 3231.255001] ? fput+0xb/0x140 [ 3231.258087] ? SyS_write+0x14d/0x210 [ 3231.261781] ? SyS_read+0x210/0x210 [ 3231.265388] ? __do_page_fault+0x159/0xad0 [ 3231.269605] ? do_syscall_64+0x4c/0x640 [ 3231.273558] ? SyS_socketpair+0x480/0x480 [ 3231.277697] do_syscall_64+0x1d5/0x640 [ 3231.281567] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3231.286736] RIP: 0033:0x4665f9 [ 3231.289903] RSP: 002b:00007fa438e83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 23:20:42 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, 0x0, 0x0) 23:20:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 3231.297681] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3231.304929] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 3231.312177] RBP: 00007fa438e831d0 R08: 0000000000000000 R09: 0000000000000000 [ 3231.319435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3231.326736] R13: 00007ffd32a5989f R14: 00007fa438e83300 R15: 0000000000022000 [ 3231.368571] CPU: 0 PID: 29231 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 3231.376500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3231.385866] Call Trace: [ 3231.388467] dump_stack+0x1b2/0x281 [ 3231.392120] should_fail.cold+0x10a/0x149 [ 3231.396286] should_failslab+0xd6/0x130 [ 3231.400267] kmem_cache_alloc+0x40/0x3c0 [ 3231.404343] skb_clone+0x126/0x9a0 [ 3231.407958] netlink_deliver_tap+0x655/0x7d0 [ 3231.412350] netlink_unicast+0x485/0x610 [ 3231.416419] ? netlink_sendskb+0xd0/0xd0 [ 3231.420461] ? __check_object_size+0x179/0x230 [ 3231.425024] netlink_sendmsg+0x62e/0xb80 [ 3231.429072] ? nlmsg_notify+0x170/0x170 [ 3231.433029] ? kernel_recvmsg+0x210/0x210 [ 3231.437159] ? security_socket_sendmsg+0x83/0xb0 [ 3231.441894] ? nlmsg_notify+0x170/0x170 [ 3231.445845] sock_sendmsg+0xb5/0x100 [ 3231.450690] ___sys_sendmsg+0x6c8/0x800 [ 3231.454655] ? get_pid_task+0x91/0x130 [ 3231.458523] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 3231.463263] ? lock_downgrade+0x740/0x740 [ 3231.467391] ? __fget+0x1fe/0x360 [ 3231.470827] ? lock_acquire+0x170/0x3f0 [ 3231.474779] ? lock_downgrade+0x740/0x740 [ 3231.478906] ? __fget+0x225/0x360 [ 3231.482339] ? __fdget+0x196/0x1f0 [ 3231.485858] ? sockfd_lookup_light+0xb2/0x160 [ 3231.490337] __sys_sendmsg+0xa3/0x120 [ 3231.494129] ? SyS_shutdown+0x160/0x160 [ 3231.498084] ? wait_for_completion_io+0x10/0x10 [ 3231.502739] ? SyS_read+0x210/0x210 [ 3231.506359] ? __do_page_fault+0x159/0xad0 [ 3231.510575] SyS_sendmsg+0x27/0x40 [ 3231.514277] ? __sys_sendmsg+0x120/0x120 23:20:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1d, 0x1, 0x1, 0x9, 0x488, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x9, 0x7, 0x8, 0x1822, r2, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x40) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 23:20:42 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, 0x0, 0x0) [ 3231.518332] do_syscall_64+0x1d5/0x640 [ 3231.522208] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3231.527377] RIP: 0033:0x4665f9 [ 3231.530557] RSP: 002b:00007fe3be0ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3231.538244] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3231.545493] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3231.552750] RBP: 00007fe3be0ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3231.560020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 23:20:42 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 23:20:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 3231.567296] R13: 00007fff80a69a4f R14: 00007fe3be0ff300 R15: 0000000000022000 23:20:42 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 23:20:42 executing program 2 (fault-call:1 fault-nth:3): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84"], 0x2c}}, 0x0) 23:20:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000040)={[{0x3, 0xff13, 0x9, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, 0x81, 0x1, 0x2, 0x9}, {0x101, 0x7, 0xda, 0xe0, 0x3, 0x7, 0x87, 0x2, 0x9, 0x0, 0x7, 0x1, 0x9}, {0xfffffff8, 0x2da7, 0x81, 0x3f, 0x80, 0x3f, 0x0, 0x2, 0x48, 0x3f, 0x6, 0x81, 0x10000}], 0x5}) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000100)=""/4096) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000000)={0x4, 0x20f}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:42 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 23:20:42 executing program 0 (fault-call:1 fault-nth:4): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) [ 3231.737078] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 23:20:42 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000340), 0xc82, 0xa00) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000380)={0x9001, &(0x7f0000000300), 0x0, r2, 0x8}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x7, 0x20, 0x5, 0x0, 0x0, 0x6, 0xfe, 0x5, 0x9, 0x3, 0x0, 0x20, 0x504e}, {0x8, 0xf001, 0x7, 0xfb, 0x3, 0x6, 0x6, 0xee, 0xed, 0x1, 0x81, 0xea, 0x6}, {0xff, 0x7, 0x1, 0x2, 0x1, 0x1f, 0x2, 0x0, 0x8, 0x9, 0x3, 0xff, 0x7fffffff}], 0x7f}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000200), 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000024c0)={'syztnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x29, 0x9, 0x4, 0x7e, 0x28, @dev={0xfe, 0x80, '\x00', 0x2a}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7, 0x0, 0x934}}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000001c0)={0x0, 0xfffb, "d24790", 0x9, 0x4}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x29, 0xff, 0x20, 0x9, 0x40, @empty, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x20, 0x7, 0x8}}) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4) [ 3231.803617] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3231.820614] FAULT_INJECTION: forcing a failure. [ 3231.820614] name failslab, interval 1, probability 0, space 0, times 0 [ 3231.832289] CPU: 1 PID: 29285 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 3231.840184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3231.849549] Call Trace: 23:20:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 3231.852152] dump_stack+0x1b2/0x281 [ 3231.855791] should_fail.cold+0x10a/0x149 [ 3231.859952] should_failslab+0xd6/0x130 [ 3231.863936] kmem_cache_alloc+0x40/0x3c0 [ 3231.868010] skb_clone+0x126/0x9a0 [ 3231.876767] hci_send_to_channel+0x135/0x200 [ 3231.881180] mgmt_send_event+0x246/0x330 [ 3231.885250] mgmt_index_removed+0x200/0x240 [ 3231.889579] ? mgmt_index_added+0x210/0x210 [ 3231.893904] ? _raw_read_unlock+0x29/0x40 [ 3231.898059] ? hci_dev_get+0xe6/0x190 [ 3231.901865] hci_sock_bind+0xce1/0x1170 [ 3231.905841] ? hci_sock_ioctl+0x690/0x690 [ 3231.910004] ? security_socket_bind+0x83/0xb0 [ 3231.914504] SyS_bind+0x174/0x1f0 [ 3231.917960] ? SyS_socketpair+0x480/0x480 [ 3231.922116] ? wait_for_completion_io+0x10/0x10 [ 3231.926795] ? vfs_write+0x319/0x4d0 [ 3231.930509] ? fput+0xb/0x140 [ 3231.933619] ? SyS_write+0x14d/0x210 [ 3231.937509] ? SyS_read+0x210/0x210 [ 3231.941139] ? __do_page_fault+0x159/0xad0 [ 3231.945382] ? do_syscall_64+0x4c/0x640 [ 3231.949358] ? SyS_socketpair+0x480/0x480 [ 3231.953515] do_syscall_64+0x1d5/0x640 [ 3231.957411] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3231.962594] RIP: 0033:0x4665f9 [ 3231.965782] RSP: 002b:00007fa438e83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 3231.973491] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3231.980757] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 3231.988025] RBP: 00007fa438e831d0 R08: 0000000000000000 R09: 0000000000000000 [ 3231.995295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3232.002573] R13: 00007ffd32a5989f R14: 00007fa438e83300 R15: 0000000000022000 [ 3232.029674] FAULT_INJECTION: forcing a failure. [ 3232.029674] name failslab, interval 1, probability 0, space 0, times 0 23:20:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1d, 0x1, 0x1, 0x9, 0x488, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x9, 0x7, 0x8, 0x1822, r2, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x40) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x1) [ 3232.074911] CPU: 1 PID: 29283 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 3232.082836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3232.092284] Call Trace: [ 3232.094894] dump_stack+0x1b2/0x281 [ 3232.098544] should_fail.cold+0x10a/0x149 [ 3232.102704] should_failslab+0xd6/0x130 [ 3232.106691] kmem_cache_alloc_node+0x263/0x410 [ 3232.111283] __alloc_skb+0x5c/0x510 [ 3232.114928] netlink_ack+0x216/0x9a0 [ 3232.118649] ? netlink_sendmsg+0xb80/0xb80 [ 3232.122886] ? netdev_pick_tx+0x2e0/0x2e0 [ 3232.127048] netlink_rcv_skb+0x2c5/0x390 [ 3232.131113] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 3232.135595] ? netlink_ack+0x9a0/0x9a0 [ 3232.139476] netlink_unicast+0x437/0x610 [ 3232.143697] ? netlink_sendskb+0xd0/0xd0 [ 3232.147739] ? __check_object_size+0x179/0x230 [ 3232.152305] netlink_sendmsg+0x62e/0xb80 [ 3232.156350] ? nlmsg_notify+0x170/0x170 [ 3232.160410] ? kernel_recvmsg+0x210/0x210 [ 3232.164564] ? security_socket_sendmsg+0x83/0xb0 [ 3232.169302] ? nlmsg_notify+0x170/0x170 [ 3232.173256] sock_sendmsg+0xb5/0x100 [ 3232.176955] ___sys_sendmsg+0x6c8/0x800 [ 3232.180908] ? get_pid_task+0x91/0x130 [ 3232.184775] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 3232.189513] ? lock_downgrade+0x740/0x740 [ 3232.193642] ? __fget+0x1fe/0x360 [ 3232.197082] ? lock_acquire+0x170/0x3f0 [ 3232.201171] ? lock_downgrade+0x740/0x740 [ 3232.205344] ? __fget+0x225/0x360 [ 3232.208785] ? __fdget+0x196/0x1f0 [ 3232.212325] ? sockfd_lookup_light+0xb2/0x160 [ 3232.216814] __sys_sendmsg+0xa3/0x120 [ 3232.220597] ? SyS_shutdown+0x160/0x160 [ 3232.224551] ? wait_for_completion_io+0x10/0x10 [ 3232.229204] ? SyS_read+0x210/0x210 [ 3232.232812] ? __do_page_fault+0x159/0xad0 [ 3232.237035] SyS_sendmsg+0x27/0x40 [ 3232.241422] ? __sys_sendmsg+0x120/0x120 [ 3232.245465] do_syscall_64+0x1d5/0x640 [ 3232.249951] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3232.255143] RIP: 0033:0x4665f9 [ 3232.258314] RSP: 002b:00007fe3be0ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3232.266178] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 23:20:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 3232.273447] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3232.280698] RBP: 00007fe3be0ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3232.287947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3232.295221] R13: 00007fff80a69a4f R14: 00007fe3be0ff300 R15: 0000000000022000 23:20:43 executing program 0 (fault-call:1 fault-nth:5): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) [ 3232.428634] FAULT_INJECTION: forcing a failure. [ 3232.428634] name failslab, interval 1, probability 0, space 0, times 0 [ 3232.440032] CPU: 1 PID: 29324 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 3232.447927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3232.457282] Call Trace: [ 3232.460138] dump_stack+0x1b2/0x281 [ 3232.463774] should_fail.cold+0x10a/0x149 [ 3232.467904] should_failslab+0xd6/0x130 [ 3232.471862] kmem_cache_alloc+0x40/0x3c0 [ 3232.476088] skb_clone+0x126/0x9a0 [ 3232.479612] hci_send_to_channel+0x135/0x200 [ 3232.484013] mgmt_send_event+0x246/0x330 [ 3232.488057] mgmt_index_removed+0x200/0x240 [ 3232.492636] ? mgmt_index_added+0x210/0x210 [ 3232.496939] ? _raw_read_unlock+0x29/0x40 [ 3232.501063] ? hci_dev_get+0xe6/0x190 [ 3232.504841] hci_sock_bind+0xce1/0x1170 [ 3232.508972] ? hci_sock_ioctl+0x690/0x690 [ 3232.513098] ? security_socket_bind+0x83/0xb0 [ 3232.517573] SyS_bind+0x174/0x1f0 [ 3232.521018] ? SyS_socketpair+0x480/0x480 [ 3232.525145] ? wait_for_completion_io+0x10/0x10 [ 3232.529793] ? vfs_write+0x319/0x4d0 [ 3232.533528] ? fput+0xb/0x140 [ 3232.536615] ? SyS_write+0x14d/0x210 [ 3232.540305] ? SyS_read+0x210/0x210 [ 3232.543997] ? __do_page_fault+0x159/0xad0 [ 3232.548210] ? do_syscall_64+0x4c/0x640 [ 3232.552166] ? SyS_socketpair+0x480/0x480 [ 3232.556292] do_syscall_64+0x1d5/0x640 [ 3232.560161] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3232.565328] RIP: 0033:0x4665f9 [ 3232.568496] RSP: 002b:00007fa438e83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 23:20:43 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000000)=0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) r2 = accept(r0, &(0x7f00000001c0)=@nfc_llcp, &(0x7f0000000240)=0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'gretap0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x7, 0x700, 0x6, 0xc4, {{0xe, 0x4, 0x1, 0x2, 0x38, 0x67, 0x0, 0x81, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x5c, 0x3, 0x4, [{@rand_addr=0x64010102, 0x4}, {@remote, 0x4}, {@broadcast, 0x1}]}, @ra={0x94, 0x4}, @noop]}}}}}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000480)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000600)={'tunl0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x7, 0x7, 0x1, 0xfffffffa, {{0x7, 0x4, 0x1, 0x6, 0x1c, 0x67, 0x0, 0xa8, 0x4, 0x0, @remote, @remote, {[@generic={0x88, 0x8, "0f35f8738c70"}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x120, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x120}}, 0x8840) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10804}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x200, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x4004800) sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000500)=@mpls_getnetconf={0x44, 0x52, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8c}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}, @NETCONFA_IFINDEX={0x8, 0x1, r3}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xd693}, @NETCONFA_IFINDEX={0x8, 0x1, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008080}, 0x84) [ 3232.576183] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3232.583433] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 3232.590718] RBP: 00007fa438e831d0 R08: 0000000000000000 R09: 0000000000000000 [ 3232.597979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3232.605235] R13: 00007ffd32a5989f R14: 00007fa438e83300 R15: 0000000000022000 23:20:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:43 executing program 2: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x45) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r2, 0x7b3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24048018}, 0x40) 23:20:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xed8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40810}, 0x20004000) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000180)=""/232) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1d, 0x1, 0x1, 0x9, 0x488, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x9, 0x7, 0x8, 0x1822, r2, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x40) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 23:20:43 executing program 0 (fault-call:1 fault-nth:6): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) 23:20:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000040)={[{0x3, 0xff13, 0x9, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, 0x81, 0x1, 0x2, 0x9}, {0x101, 0x7, 0xda, 0xe0, 0x3, 0x7, 0x87, 0x2, 0x9, 0x0, 0x7, 0x1, 0x9}, {0xfffffff8, 0x2da7, 0x81, 0x3f, 0x80, 0x3f, 0x0, 0x2, 0x48, 0x3f, 0x6, 0x81, 0x10000}], 0x5}) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000100)=""/4096) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000000)={0x4, 0x20f}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="0d00000010007d84"], 0x2c}}, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000040)={0x2, "6cc9"}, 0x3) [ 3232.902017] FAULT_INJECTION: forcing a failure. [ 3232.902017] name failslab, interval 1, probability 0, space 0, times 0 [ 3232.913460] CPU: 1 PID: 29363 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 3232.921353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3232.930721] Call Trace: [ 3232.933321] dump_stack+0x1b2/0x281 [ 3232.936962] should_fail.cold+0x10a/0x149 [ 3232.941132] should_failslab+0xd6/0x130 [ 3232.945114] kmem_cache_alloc_node+0x54/0x410 [ 3232.949700] __alloc_skb+0x5c/0x510 [ 3232.953332] hci_send_monitor_ctrl_event+0x164/0x500 [ 3232.958444] mgmt_send_event+0x2b3/0x330 [ 3232.962511] mgmt_index_removed+0x200/0x240 [ 3232.966818] ? mgmt_index_added+0x210/0x210 [ 3232.971124] ? _raw_read_unlock+0x29/0x40 [ 3232.975256] ? hci_dev_get+0xe6/0x190 [ 3232.979037] hci_sock_bind+0xce1/0x1170 [ 3232.982991] ? hci_sock_ioctl+0x690/0x690 [ 3232.987828] ? security_socket_bind+0x83/0xb0 [ 3232.993644] SyS_bind+0x174/0x1f0 [ 3232.997082] ? SyS_socketpair+0x480/0x480 [ 3233.001213] ? wait_for_completion_io+0x10/0x10 [ 3233.005863] ? vfs_write+0x319/0x4d0 [ 3233.009557] ? fput+0xb/0x140 [ 3233.012652] ? SyS_write+0x14d/0x210 [ 3233.016345] ? SyS_read+0x210/0x210 [ 3233.019966] ? __do_page_fault+0x159/0xad0 [ 3233.024179] ? do_syscall_64+0x4c/0x640 [ 3233.028740] ? SyS_socketpair+0x480/0x480 [ 3233.032889] do_syscall_64+0x1d5/0x640 [ 3233.036758] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3233.041924] RIP: 0033:0x4665f9 [ 3233.045102] RSP: 002b:00007fa438e83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 23:20:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 3233.052790] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3233.060756] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 3233.068006] RBP: 00007fa438e831d0 R08: 0000000000000000 R09: 0000000000000000 [ 3233.075256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3233.082506] R13: 00007ffd32a5989f R14: 00007fa438e83300 R15: 0000000000022000 23:20:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x18012}, 0x0) 23:20:44 executing program 0 (fault-call:1 fault-nth:7): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:44 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="29f88391f3f4d89128364f14b57e008313dd4ce9c1b168c6847d93e79fe51130b3efc0966387e6131fe9e742c1babdd003cc973b68b3da2bef063ecccd04e0c00671fee510e81def6af2f883579090d56523f1f87d34d700b54cadf14db8ae215a938ced20e8fc13d80a73cf50e82d16d952814278d55986b70e81e4fdef89f844c8f04abcd9b5128f655c505ed9a7e6325cf0b05c19e4"], 0x2c}}, 0x0) 23:20:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="63579d0400f800c2"], 0x2c}}, 0x0) [ 3233.201094] FAULT_INJECTION: forcing a failure. [ 3233.201094] name failslab, interval 1, probability 0, space 0, times 0 [ 3233.212861] CPU: 1 PID: 29392 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 3233.220759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3233.230390] Call Trace: [ 3233.232989] dump_stack+0x1b2/0x281 [ 3233.236635] should_fail.cold+0x10a/0x149 [ 3233.240976] should_failslab+0xd6/0x130 [ 3233.244960] kmem_cache_alloc_node_trace+0x58/0x400 [ 3233.249993] __kmalloc_node_track_caller+0x38/0x70 [ 3233.254955] __alloc_skb+0x96/0x510 [ 3233.259368] hci_send_monitor_ctrl_event+0x164/0x500 [ 3233.264633] mgmt_send_event+0x2b3/0x330 [ 3233.268677] mgmt_index_removed+0x200/0x240 [ 3233.272979] ? mgmt_index_added+0x210/0x210 [ 3233.277477] ? _raw_read_unlock+0x29/0x40 [ 3233.281603] ? hci_dev_get+0xe6/0x190 [ 3233.285386] hci_sock_bind+0xce1/0x1170 [ 3233.289345] ? hci_sock_ioctl+0x690/0x690 [ 3233.293478] ? security_socket_bind+0x83/0xb0 [ 3233.297954] SyS_bind+0x174/0x1f0 [ 3233.301732] ? SyS_socketpair+0x480/0x480 [ 3233.305861] ? wait_for_completion_io+0x10/0x10 [ 3233.310525] ? vfs_write+0x319/0x4d0 [ 3233.314229] ? fput+0xb/0x140 [ 3233.317334] ? SyS_write+0x14d/0x210 [ 3233.321040] ? SyS_read+0x210/0x210 [ 3233.324655] ? __do_page_fault+0x159/0xad0 [ 3233.328983] ? do_syscall_64+0x4c/0x640 [ 3233.333216] ? SyS_socketpair+0x480/0x480 [ 3233.337458] do_syscall_64+0x1d5/0x640 [ 3233.341340] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3233.346515] RIP: 0033:0x4665f9 [ 3233.349685] RSP: 002b:00007fa438e83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 3233.357472] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3233.364721] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 3233.371973] RBP: 00007fa438e831d0 R08: 0000000000000000 R09: 0000000000000000 [ 3233.379355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3233.386631] R13: 00007ffd32a5989f R14: 00007fa438e83300 R15: 0000000000022000 23:20:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x2f) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x2, 0x0, [{0x3, 0x2, 0x0, 0x0, @sint={0x800, 0x2}}, {0x3, 0x4, 0x0, 0x0, @adapter={0x8000, 0x4ce2, 0x5, 0x6, 0x3f}}]}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000000)={0x2, 0x7, 0x6, @empty, 'ip6gretap0\x00'}) 23:20:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1d, 0x1, 0x1, 0x9, 0x488, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x9, 0x7, 0x8, 0x1822, r2, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x40) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 23:20:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0x1a07, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x2c}}, 0x0) 23:20:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:44 executing program 0 (fault-call:1 fault-nth:8): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:44 executing program 1 (fault-call:2 fault-nth:0): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) [ 3233.607747] FAULT_INJECTION: forcing a failure. [ 3233.607747] name failslab, interval 1, probability 0, space 0, times 0 [ 3233.611777] FAULT_INJECTION: forcing a failure. [ 3233.611777] name failslab, interval 1, probability 0, space 0, times 0 [ 3233.619072] CPU: 1 PID: 29427 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 3233.639146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3233.648507] Call Trace: [ 3233.651115] dump_stack+0x1b2/0x281 23:20:44 executing program 2: openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84"], 0x2c}}, 0x0) [ 3233.654738] should_fail.cold+0x10a/0x149 [ 3233.658879] should_failslab+0xd6/0x130 [ 3233.662849] kmem_cache_alloc_node+0x54/0x410 [ 3233.667355] __alloc_skb+0x5c/0x510 [ 3233.671066] hci_send_monitor_ctrl_event+0x164/0x500 [ 3233.676171] mgmt_send_event+0x2b3/0x330 [ 3233.680231] mgmt_index_removed+0x200/0x240 [ 3233.684552] ? mgmt_index_added+0x210/0x210 [ 3233.688872] ? _raw_read_unlock+0x29/0x40 [ 3233.693022] ? hci_dev_get+0xe6/0x190 [ 3233.696929] hci_sock_bind+0xce1/0x1170 [ 3233.700938] ? hci_sock_ioctl+0x690/0x690 [ 3233.705192] ? security_socket_bind+0x83/0xb0 [ 3233.709692] SyS_bind+0x174/0x1f0 [ 3233.713161] ? SyS_socketpair+0x480/0x480 [ 3233.717310] ? wait_for_completion_io+0x10/0x10 [ 3233.722067] ? vfs_write+0x319/0x4d0 [ 3233.725790] ? fput+0xb/0x140 [ 3233.728918] ? SyS_write+0x14d/0x210 [ 3233.732717] ? SyS_read+0x210/0x210 [ 3233.736387] ? __do_page_fault+0x159/0xad0 [ 3233.740627] ? do_syscall_64+0x4c/0x640 [ 3233.744608] ? SyS_socketpair+0x480/0x480 [ 3233.748760] do_syscall_64+0x1d5/0x640 [ 3233.752656] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3233.757846] RIP: 0033:0x4665f9 [ 3233.761028] RSP: 002b:00007fa438e83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 3233.768920] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3233.776192] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 3233.783471] RBP: 00007fa438e831d0 R08: 0000000000000000 R09: 0000000000000000 [ 3233.790787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3233.798056] R13: 00007ffd32a5989f R14: 00007fa438e83300 R15: 0000000000022000 [ 3233.821532] CPU: 0 PID: 29434 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 3233.829448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3233.832248] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3233.838798] Call Trace: [ 3233.838818] dump_stack+0x1b2/0x281 [ 3233.838833] should_fail.cold+0x10a/0x149 [ 3233.850519] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3233.853623] should_failslab+0xd6/0x130 [ 3233.853639] kmem_cache_alloc_trace+0x29a/0x3d0 [ 3233.878187] ? rds_cmsg_atomic+0xe20/0xe20 [ 3233.882437] rdma_create_id+0x57/0x4c0 [ 3233.886330] ? rds_ib_ic_info+0x40/0x40 [ 3233.890307] rds_ib_laddr_check+0x6e/0x170 [ 3233.894544] ? rds_ib_ic_info+0x40/0x40 [ 3233.898520] ? rds_ib_ic_info+0x40/0x40 [ 3233.902483] rds_bind+0xc5c/0x1610 [ 3233.906006] ? rds_remove_bound+0x60/0x60 [ 3233.910228] ? _copy_from_user+0x96/0x100 [ 3233.914363] ? security_socket_bind+0x83/0xb0 [ 3233.918839] SyS_bind+0x174/0x1f0 [ 3233.922270] ? SyS_socketpair+0x480/0x480 [ 3233.926405] ? wait_for_completion_io+0x10/0x10 [ 3233.931064] ? fput+0xb/0x140 [ 3233.934186] ? SyS_write+0x14d/0x210 [ 3233.937876] ? SyS_read+0x210/0x210 [ 3233.941483] ? __do_page_fault+0x159/0xad0 [ 3233.945694] ? do_syscall_64+0x4c/0x640 [ 3233.949650] ? SyS_socketpair+0x480/0x480 [ 3233.953775] do_syscall_64+0x1d5/0x640 [ 3233.957648] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3233.962892] RIP: 0033:0x4665f9 23:20:44 executing program 2: write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) syz_open_dev$audion(&(0x7f0000000040), 0x2, 0x22000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84"], 0x2c}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendto$llc(r1, &(0x7f00000001c0)="9d2703e09f5aea336c49fd8e2bacec565415510790b1053f05a4d53100985ac744b1277b83939c896381922d9b092827eb682baf4e82255a36a45416b70fb9e087aa544c8415b05b88d55bb8811415239fcf32b80ef396fd67131f53c71ed4443585ddd23e431f49013bfc4c4e8771e3446ab88e9bc5802a38275c61c0c6a06659583051e46b210e789e9ed6359d0f9c9aa4e7d9b45cfe56bdafca57400a24954578cf4214acd48491ca5d6cb1ecc0edb9b9f98adea275e70f4e2e25aab1a3461b71242178cefd89551bdce1be", 0xcd, 0x40010, 0x0, 0x0) 23:20:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:44 executing program 4: bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1d, 0x1, 0x1, 0x9, 0x488, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x9, 0x7, 0x8, 0x1822, r2, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x40) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:44 executing program 0 (fault-call:1 fault-nth:9): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) [ 3233.966062] RSP: 002b:00007f287a63f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 3233.973749] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3233.980998] RDX: 0000000000000010 RSI: 00000000200000c0 RDI: 0000000000000003 [ 3233.988259] RBP: 00007f287a63f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3233.995514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3234.002762] R13: 00007ffccfd3099f R14: 00007f287a63f300 R15: 0000000000022000 [ 3234.065011] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3234.100813] FAULT_INJECTION: forcing a failure. [ 3234.100813] name failslab, interval 1, probability 0, space 0, times 0 [ 3234.112143] CPU: 0 PID: 29461 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 3234.120025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3234.129371] Call Trace: [ 3234.131957] dump_stack+0x1b2/0x281 [ 3234.135613] should_fail.cold+0x10a/0x149 [ 3234.139755] should_failslab+0xd6/0x130 [ 3234.143713] kmem_cache_alloc_node_trace+0x58/0x400 [ 3234.148800] __kmalloc_node_track_caller+0x38/0x70 [ 3234.153719] __alloc_skb+0x96/0x510 [ 3234.157330] hci_send_monitor_ctrl_event+0x164/0x500 [ 3234.162416] mgmt_send_event+0x2b3/0x330 [ 3234.166461] mgmt_index_removed+0x200/0x240 [ 3234.170764] ? mgmt_index_added+0x210/0x210 [ 3234.175066] ? _raw_read_unlock+0x29/0x40 [ 3234.179193] ? hci_dev_get+0xe6/0x190 [ 3234.183148] hci_sock_bind+0xce1/0x1170 [ 3234.187120] ? hci_sock_ioctl+0x690/0x690 [ 3234.191253] ? security_socket_bind+0x83/0xb0 [ 3234.195801] SyS_bind+0x174/0x1f0 [ 3234.199233] ? SyS_socketpair+0x480/0x480 [ 3234.203389] ? wait_for_completion_io+0x10/0x10 [ 3234.208053] ? vfs_write+0x319/0x4d0 [ 3234.211847] ? fput+0xb/0x140 [ 3234.214935] ? SyS_write+0x14d/0x210 [ 3234.218641] ? SyS_read+0x210/0x210 [ 3234.222255] ? do_syscall_64+0x4c/0x640 [ 3234.226214] ? SyS_socketpair+0x480/0x480 [ 3234.230379] do_syscall_64+0x1d5/0x640 [ 3234.234263] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3234.239454] RIP: 0033:0x4665f9 [ 3234.242633] RSP: 002b:00007fa438e83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 3234.250324] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3234.257576] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 23:20:45 executing program 1 (fault-call:2 fault-nth:1): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 23:20:45 executing program 0 (fault-call:1 fault-nth:10): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) [ 3234.264836] RBP: 00007fa438e831d0 R08: 0000000000000000 R09: 0000000000000000 [ 3234.272084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3234.279342] R13: 00007ffd32a5989f R14: 00007fa438e83300 R15: 0000000000022000 [ 3234.301264] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 23:20:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010007d84b43c6d43385778109ea08602517bce3722543a04b6a48dc84272005de18c4b64b9df73ca02ef0a6872bcf4f75cf460bd3613365c2abeb62498389ea4cb623bf1085eebf8c4ca8e2fc6a0ce08b40b18c92edd6de185084e2ac151e03d10d9aeb4d84287813df40722cf2fd37f682b9255834dc58eb1bd3ad2b5bffd9d6939543033ad46d43b8315ae0eeebed544bcac5a481a19247bbfbd47e53bb6ed47bdc72b49dd5c70a6beda9b609aea300f42094f93fa7fe3dc78dee697211ce304f2f7ad2115bcc0f97811d433688dbf4b8e3a540d06f342c55c0e6ae4c4bb4ae65df2e22f6370"], 0x2c}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000000)={0x6000, 0x2000}) 23:20:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 3234.383619] FAULT_INJECTION: forcing a failure. [ 3234.383619] name failslab, interval 1, probability 0, space 0, times 0 [ 3234.416191] FAULT_INJECTION: forcing a failure. [ 3234.416191] name failslab, interval 1, probability 0, space 0, times 0 [ 3234.422636] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3234.427862] CPU: 1 PID: 29477 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 3234.444296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3234.453738] Call Trace: [ 3234.456343] dump_stack+0x1b2/0x281 [ 3234.459978] should_fail.cold+0x10a/0x149 [ 3234.464134] should_failslab+0xd6/0x130 [ 3234.468143] kmem_cache_alloc_node+0x54/0x410 [ 3234.472739] __alloc_skb+0x5c/0x510 [ 3234.476397] hci_send_monitor_ctrl_event+0x164/0x500 [ 3234.481509] mgmt_send_event+0x2b3/0x330 [ 3234.485669] mgmt_index_removed+0x200/0x240 [ 3234.489978] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3234.498655] ? mgmt_index_added+0x210/0x210 [ 3234.502982] ? _raw_read_unlock+0x29/0x40 [ 3234.507147] ? hci_dev_get+0xe6/0x190 [ 3234.510958] hci_sock_bind+0xce1/0x1170 [ 3234.514946] ? hci_sock_ioctl+0x690/0x690 [ 3234.519127] ? security_socket_bind+0x83/0xb0 [ 3234.523628] SyS_bind+0x174/0x1f0 [ 3234.527092] ? SyS_socketpair+0x480/0x480 23:20:45 executing program 2: ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000000)={{@hyper, 0x6}, @any, 0x5, 0x4, 0x100000001, 0x6bdb, 0x4, 0x9, 0x7}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 3234.531248] ? wait_for_completion_io+0x10/0x10 [ 3234.535920] ? vfs_write+0x319/0x4d0 [ 3234.539627] ? fput+0xb/0x140 [ 3234.542729] ? SyS_write+0x14d/0x210 [ 3234.546449] ? SyS_read+0x210/0x210 [ 3234.550083] ? __do_page_fault+0x159/0xad0 [ 3234.554324] ? do_syscall_64+0x4c/0x640 [ 3234.558300] ? SyS_socketpair+0x480/0x480 [ 3234.562454] do_syscall_64+0x1d5/0x640 [ 3234.566350] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3234.571640] RIP: 0033:0x4665f9 [ 3234.574829] RSP: 002b:00007fa438e83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 3234.582536] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3234.589809] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 3234.597254] RBP: 00007fa438e831d0 R08: 0000000000000000 R09: 0000000000000000 [ 3234.604522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3234.611796] R13: 00007ffd32a5989f R14: 00007fa438e83300 R15: 0000000000022000 [ 3234.619077] CPU: 0 PID: 29472 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 3234.626974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3234.636327] Call Trace: [ 3234.638920] dump_stack+0x1b2/0x281 [ 3234.642555] should_fail.cold+0x10a/0x149 [ 3234.646707] should_failslab+0xd6/0x130 [ 3234.650714] kmem_cache_alloc_trace+0x29a/0x3d0 [ 3234.655390] cma_alloc_port+0xc6/0x300 [ 3234.659305] ? __radix_tree_lookup+0x1b5/0x2e0 [ 3234.663889] ? rdma_reject+0x2f0/0x2f0 [ 3234.667782] rdma_bind_addr+0xcf5/0x23f0 [ 3234.671866] ? urandom_read+0x610/0x610 [ 3234.675930] ? rdma_connect+0x15c0/0x15c0 [ 3234.680111] ? rdma_create_id+0x3d4/0x4c0 [ 3234.684268] rds_ib_laddr_check+0xaf/0x170 [ 3234.688574] ? rds_ib_ic_info+0x40/0x40 [ 3234.692562] ? rds_ib_ic_info+0x40/0x40 [ 3234.696541] rds_bind+0xc5c/0x1610 [ 3234.700091] ? rds_remove_bound+0x60/0x60 [ 3234.704255] ? _copy_from_user+0x96/0x100 [ 3234.708415] ? security_socket_bind+0x83/0xb0 [ 3234.712911] SyS_bind+0x174/0x1f0 [ 3234.716355] ? SyS_socketpair+0x480/0x480 [ 3234.720666] ? wait_for_completion_io+0x10/0x10 [ 3234.725359] ? fput+0xb/0x140 [ 3234.728449] ? SyS_write+0x14d/0x210 [ 3234.732247] ? SyS_read+0x210/0x210 [ 3234.735865] ? __do_page_fault+0x159/0xad0 [ 3234.740166] ? do_syscall_64+0x4c/0x640 [ 3234.744121] ? SyS_socketpair+0x480/0x480 [ 3234.748251] do_syscall_64+0x1d5/0x640 [ 3234.752131] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3234.757323] RIP: 0033:0x4665f9 [ 3234.760498] RSP: 002b:00007f287a63f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 3234.768185] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3234.775440] RDX: 0000000000000010 RSI: 00000000200000c0 RDI: 0000000000000003 23:20:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:20:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x2f) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x2, 0x0, [{0x3, 0x2, 0x0, 0x0, @sint={0x800, 0x2}}, {0x3, 0x4, 0x0, 0x0, @adapter={0x8000, 0x4ce2, 0x5, 0x6, 0x3f}}]}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000000)={0x2, 0x7, 0x6, @empty, 'ip6gretap0\x00'}) 23:20:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1d, 0x1, 0x1, 0x9, 0x488, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x9, 0x7, 0x8, 0x1822, r2, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x40) 23:20:45 executing program 0 (fault-call:1 fault-nth:11): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) [ 3234.782692] RBP: 00007f287a63f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3234.790028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3234.797457] R13: 00007ffccfd3099f R14: 00007f287a63f300 R15: 0000000000022000 [ 3234.909332] FAULT_INJECTION: forcing a failure. [ 3234.909332] name failslab, interval 1, probability 0, space 0, times 0 [ 3234.920701] CPU: 0 PID: 29516 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 3234.928692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3234.938042] Call Trace: [ 3234.940713] dump_stack+0x1b2/0x281 [ 3234.944330] should_fail.cold+0x10a/0x149 [ 3234.948476] should_failslab+0xd6/0x130 [ 3234.952444] kmem_cache_alloc_node_trace+0x58/0x400 [ 3234.957442] __kmalloc_node_track_caller+0x38/0x70 [ 3234.962354] __alloc_skb+0x96/0x510 [ 3234.965968] hci_send_monitor_ctrl_event+0x164/0x500 [ 3234.971056] mgmt_send_event+0x2b3/0x330 [ 3234.975100] mgmt_index_removed+0x200/0x240 [ 3234.979401] ? mgmt_index_added+0x210/0x210 [ 3234.983705] ? _raw_read_unlock+0x29/0x40 [ 3234.987969] ? hci_dev_get+0xe6/0x190 [ 3234.991857] hci_sock_bind+0xce1/0x1170 [ 3234.996854] ? hci_sock_ioctl+0x690/0x690 [ 3235.000985] ? security_socket_bind+0x83/0xb0 [ 3235.005465] SyS_bind+0x174/0x1f0 [ 3235.008899] ? SyS_socketpair+0x480/0x480 [ 3235.013029] ? wait_for_completion_io+0x10/0x10 [ 3235.017866] ? vfs_write+0x319/0x4d0 [ 3235.021567] ? fput+0xb/0x140 [ 3235.024655] ? SyS_write+0x14d/0x210 [ 3235.028354] ? SyS_read+0x210/0x210 [ 3235.031965] ? __do_page_fault+0x159/0xad0 [ 3235.036808] ? do_syscall_64+0x4c/0x640 [ 3235.040764] ? SyS_socketpair+0x480/0x480 [ 3235.044890] do_syscall_64+0x1d5/0x640 [ 3235.048764] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3235.053958] RIP: 0033:0x4665f9 23:20:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84"], 0x2c}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x1, @local}, 0x10) 23:20:46 executing program 1 (fault-call:2 fault-nth:2): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 23:20:46 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x1, 0x8}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 23:20:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1d, 0x1, 0x1, 0x9, 0x488, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x40) [ 3235.057144] RSP: 002b:00007fa438e83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 3235.064843] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3235.072098] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 3235.079346] RBP: 00007fa438e831d0 R08: 0000000000000000 R09: 0000000000000000 [ 3235.086602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3235.093852] R13: 00007ffd32a5989f R14: 00007fa438e83300 R15: 0000000000022000 [ 3235.132316] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3235.136290] FAULT_INJECTION: forcing a failure. [ 3235.136290] name failslab, interval 1, probability 0, space 0, times 0 [ 3235.160199] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3235.175489] CPU: 1 PID: 29524 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 3235.183506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3235.192861] Call Trace: [ 3235.195483] dump_stack+0x1b2/0x281 [ 3235.199131] should_fail.cold+0x10a/0x149 [ 3235.203448] should_failslab+0xd6/0x130 [ 3235.207431] kmem_cache_alloc+0x28e/0x3c0 [ 3235.211587] radix_tree_node_alloc.constprop.0+0x5a/0x2f0 [ 3235.217134] ? trace_hardirqs_on+0x10/0x10 [ 3235.221379] idr_get_free_cmn+0x595/0x8d0 [ 3235.225527] ? rdma_bind_addr+0x7b2/0x23f0 [ 3235.229770] idr_alloc_cmn+0xe8/0x1e0 [ 3235.233574] ? __fprop_inc_percpu_max+0x1d0/0x1d0 [ 3235.238420] ? lock_acquire+0x170/0x3f0 [ 3235.242407] cma_alloc_port+0x16f/0x300 [ 3235.246391] ? rdma_reject+0x2f0/0x2f0 [ 3235.250377] rdma_bind_addr+0xcf5/0x23f0 [ 3235.254444] ? urandom_read+0x610/0x610 [ 3235.258466] ? rdma_connect+0x15c0/0x15c0 [ 3235.262619] ? rdma_create_id+0x3d4/0x4c0 [ 3235.266774] rds_ib_laddr_check+0xaf/0x170 [ 3235.271028] ? rds_ib_ic_info+0x40/0x40 [ 3235.275028] ? rds_ib_ic_info+0x40/0x40 [ 3235.279005] rds_bind+0xc5c/0x1610 23:20:46 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000080)={{&(0x7f0000000100)=""/167, 0xa7}, &(0x7f0000000040)}, 0x20) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x8, 0x200) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f00000001c0)={0x0, 0x9, 0x10000, 0x2, 0x3}) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000200)={0xcd2}) 23:20:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x1, 0x38001) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004011}, 0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0100fb0f7d84"], 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000) r4 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000380)=0x3, 0x4) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000340), 0x4) 23:20:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x20002) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000010007d847ace7f2b3c7d10903f8fc309f3ddb1311360a2a353a86682e179ebb74cf059b9c8f61f1fbc906c3eb038ab0b8aefefd20e90b646c61601c49004ee21a0883a0184d98e"], 0x2c}}, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000280)}, &(0x7f00000002c0), 0x5a}, 0x20) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/user\x00') sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@RTM_GETNSID={0x34, 0x5a, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NETNSA_NSID={0x8}, @NETNSA_FD={0x8, 0x3, r1}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4881}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x10000, 0x8) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_getaddrlabel={0x30, 0x4a, 0x10, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x1f, 0x0, 0x0, 0x80000000}, [@IFAL_ADDRESS={0x14, 0x1, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x200400c5) [ 3235.282549] ? rds_remove_bound+0x60/0x60 [ 3235.286710] ? _copy_from_user+0x96/0x100 [ 3235.290954] ? security_socket_bind+0x83/0xb0 [ 3235.295514] SyS_bind+0x174/0x1f0 [ 3235.298973] ? SyS_socketpair+0x480/0x480 [ 3235.303218] ? wait_for_completion_io+0x10/0x10 [ 3235.308162] ? fput+0xb/0x140 [ 3235.311288] ? SyS_write+0x14d/0x210 [ 3235.315008] ? SyS_read+0x210/0x210 [ 3235.318639] ? __do_page_fault+0x159/0xad0 [ 3235.322878] ? do_syscall_64+0x4c/0x640 [ 3235.326862] ? SyS_socketpair+0x480/0x480 23:20:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) [ 3235.331370] do_syscall_64+0x1d5/0x640 [ 3235.335271] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3235.340478] RIP: 0033:0x4665f9 [ 3235.343662] RSP: 002b:00007f287a63f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 3235.351914] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3235.359184] RDX: 0000000000000010 RSI: 00000000200000c0 RDI: 0000000000000003 [ 3235.366456] RBP: 00007f287a63f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3235.373710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3235.380974] R13: 00007ffccfd3099f R14: 00007f287a63f300 R15: 0000000000022000 23:20:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1d, 0x1, 0x1, 0x9, 0x488, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x40) 23:20:46 executing program 0 (fault-call:1 fault-nth:12): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x2c}}, 0x0) [ 3235.438448] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3235.475747] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 23:20:46 executing program 1 (fault-call:2 fault-nth:3): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 23:20:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000000)={0x100003, 0xd000, 0x2, 0x1c000, 0x5821}) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) accept(r3, &(0x7f0000000040), &(0x7f0000000100)=0x80) [ 3235.563215] FAULT_INJECTION: forcing a failure. [ 3235.563215] name failslab, interval 1, probability 0, space 0, times 0 [ 3235.574789] CPU: 1 PID: 29567 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 3235.582687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3235.592481] Call Trace: [ 3235.595084] dump_stack+0x1b2/0x281 [ 3235.598728] should_fail.cold+0x10a/0x149 [ 3235.603000] should_failslab+0xd6/0x130 [ 3235.606985] kmem_cache_alloc_node+0x54/0x410 [ 3235.611490] __alloc_skb+0x5c/0x510 [ 3235.615128] hci_send_monitor_ctrl_event+0x164/0x500 [ 3235.621982] mgmt_send_event+0x2b3/0x330 [ 3235.626073] mgmt_index_removed+0x200/0x240 [ 3235.630404] ? mgmt_index_added+0x210/0x210 [ 3235.634734] ? _raw_read_unlock+0x29/0x40 [ 3235.638887] ? hci_dev_get+0xe6/0x190 [ 3235.642697] hci_sock_bind+0xce1/0x1170 [ 3235.646674] ? hci_sock_ioctl+0x690/0x690 [ 3235.650827] ? security_socket_bind+0x83/0xb0 [ 3235.655415] SyS_bind+0x174/0x1f0 [ 3235.658874] ? SyS_socketpair+0x480/0x480 [ 3235.663023] ? wait_for_completion_io+0x10/0x10 [ 3235.667698] ? vfs_write+0x319/0x4d0 [ 3235.671409] ? fput+0xb/0x140 [ 3235.674497] ? SyS_write+0x14d/0x210 [ 3235.678193] ? SyS_read+0x210/0x210 [ 3235.681892] ? __do_page_fault+0x159/0xad0 [ 3235.686112] ? do_syscall_64+0x4c/0x640 [ 3235.690075] ? SyS_socketpair+0x480/0x480 [ 3235.694217] do_syscall_64+0x1d5/0x640 [ 3235.698092] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3235.703261] RIP: 0033:0x4665f9 [ 3235.706427] RSP: 002b:00007fa438e83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 23:20:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2503f598b4e42c36"], 0x2c}}, 0x0) 23:20:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) 23:20:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84"], 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000024c0)={'syztnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0xff, 0x20, 0x2, 0x1d, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80, 0x21, 0x3, 0x7fffffff}}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x6, 0x200, 0x31, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x40, 0x2, 0x6}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r3, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000890}, 0x40) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x2, 0x0, "57faf9", 0xb1, 0x2}) r5 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000400)=0xbb0, 0x8) 23:20:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1d, 0x1, 0x1, 0x9, 0x488, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x40) [ 3235.714111] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3235.721371] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 3235.728795] RBP: 00007fa438e831d0 R08: 0000000000000000 R09: 0000000000000000 [ 3235.736044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3235.743317] R13: 00007ffd32a5989f R14: 00007fa438e83300 R15: 0000000000022000 [ 3235.805254] FAULT_INJECTION: forcing a failure. [ 3235.805254] name failslab, interval 1, probability 0, space 0, times 0 [ 3235.837059] CPU: 0 PID: 29583 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 3235.844996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3235.854614] Call Trace: [ 3235.857217] dump_stack+0x1b2/0x281 [ 3235.860854] should_fail.cold+0x10a/0x149 [ 3235.865019] should_failslab+0xd6/0x130 [ 3235.869019] kmem_cache_alloc+0x28e/0x3c0 [ 3235.873218] radix_tree_node_alloc.constprop.0+0x5a/0x2f0 [ 3235.878760] ? trace_hardirqs_on+0x10/0x10 [ 3235.883016] idr_get_free_cmn+0x595/0x8d0 [ 3235.887184] ? rdma_bind_addr+0x7b2/0x23f0 [ 3235.891542] idr_alloc_cmn+0xe8/0x1e0 [ 3235.895347] ? __fprop_inc_percpu_max+0x1d0/0x1d0 [ 3235.900190] ? lock_acquire+0x170/0x3f0 [ 3235.904179] cma_alloc_port+0x16f/0x300 [ 3235.908151] ? rdma_reject+0x2f0/0x2f0 [ 3235.912043] rdma_bind_addr+0xcf5/0x23f0 [ 3235.916108] ? urandom_read+0x610/0x610 [ 3235.920088] ? rdma_connect+0x15c0/0x15c0 [ 3235.924249] ? rdma_create_id+0x3d4/0x4c0 [ 3235.928402] rds_ib_laddr_check+0xaf/0x170 [ 3235.932638] ? rds_ib_ic_info+0x40/0x40 [ 3235.936617] ? rds_ib_ic_info+0x40/0x40 [ 3235.940607] rds_bind+0xc5c/0x1610 [ 3235.944159] ? rds_remove_bound+0x60/0x60 [ 3235.948309] ? _copy_from_user+0x96/0x100 [ 3235.952466] ? security_socket_bind+0x83/0xb0 [ 3235.956978] SyS_bind+0x174/0x1f0 [ 3235.960440] ? SyS_socketpair+0x480/0x480 [ 3235.964607] ? wait_for_completion_io+0x10/0x10 [ 3235.969314] ? fput+0xb/0x140 [ 3235.972423] ? SyS_write+0x14d/0x210 [ 3235.976142] ? SyS_read+0x210/0x210 [ 3235.979791] ? __do_page_fault+0x159/0xad0 [ 3235.985079] ? do_syscall_64+0x4c/0x640 [ 3235.989338] ? SyS_socketpair+0x480/0x480 [ 3235.993951] do_syscall_64+0x1d5/0x640 [ 3235.997855] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3236.003149] RIP: 0033:0x4665f9 23:20:46 executing program 5: bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:46 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x1, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) 23:20:46 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x1, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) 23:20:46 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x1, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) 23:20:47 executing program 0 (fault-call:1 fault-nth:13): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) [ 3236.006339] RSP: 002b:00007f287a63f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 3236.014051] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3236.021323] RDX: 0000000000000010 RSI: 00000000200000c0 RDI: 0000000000000003 [ 3236.028683] RBP: 00007f287a63f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3236.035984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3236.043516] R13: 00007ffccfd3099f R14: 00007f287a63f300 R15: 0000000000022000 [ 3236.101379] FAULT_INJECTION: forcing a failure. [ 3236.101379] name failslab, interval 1, probability 0, space 0, times 0 [ 3236.112975] CPU: 0 PID: 29616 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 3236.121046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3236.130589] Call Trace: [ 3236.133277] dump_stack+0x1b2/0x281 [ 3236.136931] should_fail.cold+0x10a/0x149 [ 3236.141097] should_failslab+0xd6/0x130 [ 3236.145170] kmem_cache_alloc_node_trace+0x58/0x400 [ 3236.150214] __kmalloc_node_track_caller+0x38/0x70 [ 3236.155155] __alloc_skb+0x96/0x510 [ 3236.159313] hci_send_monitor_ctrl_event+0x164/0x500 [ 3236.164436] mgmt_send_event+0x2b3/0x330 [ 3236.168538] mgmt_index_removed+0x200/0x240 [ 3236.172911] ? mgmt_index_added+0x210/0x210 [ 3236.177267] ? _raw_read_unlock+0x29/0x40 [ 3236.181445] ? hci_dev_get+0xe6/0x190 [ 3236.185257] hci_sock_bind+0xce1/0x1170 [ 3236.189251] ? hci_sock_ioctl+0x690/0x690 [ 3236.193422] ? security_socket_bind+0x83/0xb0 [ 3236.197934] SyS_bind+0x174/0x1f0 [ 3236.201378] ? SyS_socketpair+0x480/0x480 [ 3236.205515] ? wait_for_completion_io+0x10/0x10 [ 3236.210189] ? vfs_write+0x319/0x4d0 [ 3236.213896] ? fput+0xb/0x140 [ 3236.216988] ? SyS_write+0x14d/0x210 [ 3236.220688] ? SyS_read+0x210/0x210 [ 3236.224301] ? __do_page_fault+0x159/0xad0 [ 3236.229300] ? do_syscall_64+0x4c/0x640 [ 3236.233263] ? SyS_socketpair+0x480/0x480 [ 3236.237392] do_syscall_64+0x1d5/0x640 [ 3236.241268] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3236.246456] RIP: 0033:0x4665f9 23:20:47 executing program 1 (fault-call:2 fault-nth:4): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 23:20:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x2f) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x2, 0x0, [{0x3, 0x2, 0x0, 0x0, @sint={0x800, 0x2}}, {0x3, 0x4, 0x0, 0x0, @adapter={0x8000, 0x4ce2, 0x5, 0x6, 0x3f}}]}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000000)={0x2, 0x7, 0x6, @empty, 'ip6gretap0\x00'}) 23:20:47 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) 23:20:47 executing program 0 (fault-call:1 fault-nth:14): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) [ 3236.249624] RSP: 002b:00007fa438e83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 3236.257309] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3236.264557] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 3236.271818] RBP: 00007fa438e831d0 R08: 0000000000000000 R09: 0000000000000000 [ 3236.279065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3236.286325] R13: 00007ffd32a5989f R14: 00007fa438e83300 R15: 0000000000022000 23:20:47 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@alg={0x110, 0x10, 0x800, 0x9, 0x25dfdbfc, {{'gcm_base(cbc(aes-arm),hmac(sha1-avx2))\x00'}, '\x00', '\x00', 0x600, 0x2000}, [{0x8, 0x1, 0x80}, {0x8, 0x1, 0x7fffffff}, {0x8}, {0x8, 0x1, 0x1000}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x476a}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0xc885) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84"], 0x2c}}, 0x0) 23:20:47 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000000)={0x2, 0x3, 0x9, 0x0, 0x6}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 23:20:47 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) 23:20:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x88600) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80004}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826ba7000ff03000000050004008100000014001f0000000000000000000000ffff640101020500210001000000050007000200000005000d000000000014e827e5239d19507319321d6468913876b73361a68a3e9bdb9aad2bad97abed9b6f33e27009f63b76f702b878a8cb842abf81fcc6cd358038003241a52cda2f52931d3f034a1a98a4cde0ea6dd25287c54813fc5d52afd90a7584b7cebbc667537aa863f93ba482f542e23ee0ddc8ee7607f9a6d206947d07762560920f8924cdf4d140ccd7f57acd842a2268c60c62edb92f48d3310999a2bc57dcd1f6"], 0x50}, 0x1, 0x0, 0x0, 0x4004800}, 0x8) setsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f00000001c0)=0x2, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84"], 0x2c}}, 0x0) [ 3236.414919] FAULT_INJECTION: forcing a failure. [ 3236.414919] name failslab, interval 1, probability 0, space 0, times 0 [ 3236.488904] CPU: 0 PID: 29641 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 3236.496918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3236.506275] Call Trace: [ 3236.508873] dump_stack+0x1b2/0x281 [ 3236.512519] should_fail.cold+0x10a/0x149 [ 3236.516687] should_failslab+0xd6/0x130 [ 3236.520670] kmem_cache_alloc_node+0x263/0x410 [ 3236.525246] __alloc_skb+0x5c/0x510 [ 3236.528865] mgmt_send_event+0x42/0x330 [ 3236.532829] mgmt_index_removed+0x133/0x240 [ 3236.537144] ? mgmt_index_added+0x210/0x210 [ 3236.541451] ? _raw_read_unlock+0x29/0x40 [ 3236.545576] ? hci_dev_get+0xe6/0x190 [ 3236.549617] hci_sock_bind+0xce1/0x1170 [ 3236.553588] ? hci_sock_ioctl+0x690/0x690 [ 3236.557731] ? security_socket_bind+0x83/0xb0 [ 3236.562215] SyS_bind+0x174/0x1f0 [ 3236.565659] ? SyS_socketpair+0x480/0x480 [ 3236.569875] ? __schedule+0x893/0x1de0 [ 3236.573835] ? io_schedule_timeout+0x140/0x140 [ 3236.578395] ? SyS_read+0x210/0x210 [ 3236.582029] ? __do_page_fault+0x159/0xad0 23:20:47 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) [ 3236.586243] ? do_syscall_64+0x4c/0x640 [ 3236.590204] ? SyS_socketpair+0x480/0x480 [ 3236.594330] do_syscall_64+0x1d5/0x640 [ 3236.598215] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3236.603395] RIP: 0033:0x4665f9 [ 3236.606574] RSP: 002b:00007fa438e83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 3236.614271] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3236.621535] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 3236.628785] RBP: 00007fa438e831d0 R08: 0000000000000000 R09: 0000000000000000 23:20:47 executing program 5 (fault-call:3 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:47 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80040000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000e40)={0x54, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x81}}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x10001}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}}, 0x0) ioctl$sock_bt_hci(r1, 0x0, &(0x7f0000000a80)="e5bd0a0b9f0d0fcf5e3877bae06b53dae6f238ab560fff5e4e227beaabc14aee2e4f2500b5c9bfff649510f18f88a8b04afb3b6157f8540a714affbdba55c82a518b0cf36051f281437358441b2908331798adf740bbed17fa47f6e1854f35b91275bfbbc701e072d8e67980691803b6d6fc08d1431efe2a3d81181616c64f91ab766e68905edeb7") r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000a40)={0x2, 0x0, @broadcast}, 0x10) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000a00)={&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/129, 0x81}, {&(0x7f00000001c0)=""/162, 0xa2}, {&(0x7f0000000080)=""/14, 0xe}, {&(0x7f0000000280)=""/169, 0xa9}, {&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000000380)=""/241, 0xf1}, {&(0x7f0000000480)=""/246, 0xf6}, {&(0x7f0000000580)=""/255, 0xff}, {&(0x7f0000000680)=""/48, 0x30}], 0x9, &(0x7f0000000940)=[@mask_fadd={0x58, 0x114, 0x8, {{0x0, 0x9}, &(0x7f0000000780)=0x7628, &(0x7f00000007c0)=0xf54, 0xd1a, 0x5, 0x0, 0x7, 0x2, 0x5}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000800)=""/194, 0xc2}, &(0x7f0000000900), 0x8}}], 0x88, 0x40000}, 0x4000040) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000c80)={{&(0x7f0000000b40)=""/226, 0xe2}, &(0x7f0000000c40), 0x4}, 0x20) [ 3236.636051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3236.644256] R13: 00007ffd32a5989f R14: 00007fa438e83300 R15: 0000000000022000 [ 3236.736456] FAULT_INJECTION: forcing a failure. [ 3236.736456] name failslab, interval 1, probability 0, space 0, times 0 [ 3236.760224] CPU: 0 PID: 29668 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 3236.768265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3236.777621] Call Trace: [ 3236.780217] dump_stack+0x1b2/0x281 [ 3236.783833] should_fail.cold+0x10a/0x149 [ 3236.787965] should_failslab+0xd6/0x130 [ 3236.791930] kmem_cache_alloc+0x28e/0x3c0 [ 3236.796064] vmx_create_vcpu+0x87/0x29d0 [ 3236.800115] ? trace_hardirqs_on+0x10/0x10 [ 3236.804332] ? __mutex_unlock_slowpath+0x75/0x770 [ 3236.809156] ? _kstrtoull+0x134/0x350 [ 3236.812936] ? vmx_free_vcpu+0x2f0/0x2f0 [ 3236.816980] kvm_vm_ioctl+0x4ca/0x13e0 [ 3236.820850] ? kvm_vcpu_release+0xa0/0xa0 [ 3236.824995] ? get_pid_task+0xb8/0x130 [ 3236.828863] ? proc_fail_nth_write+0x7b/0x180 [ 3236.833351] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 3236.838258] ? trace_hardirqs_on+0x10/0x10 [ 3236.842479] ? fsnotify+0x974/0x11b0 [ 3236.846176] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 3236.851095] ? __handle_mm_fault+0x80f/0x4620 [ 3236.855570] ? SyS_write+0x1b7/0x210 [ 3236.859265] ? kvm_vcpu_release+0xa0/0xa0 [ 3236.863391] do_vfs_ioctl+0x75a/0xff0 [ 3236.867175] ? ioctl_preallocate+0x1a0/0x1a0 [ 3236.871564] ? lock_downgrade+0x740/0x740 [ 3236.875780] ? __fget+0x225/0x360 [ 3236.879230] ? do_vfs_ioctl+0xff0/0xff0 [ 3236.883272] ? security_file_ioctl+0x83/0xb0 [ 3236.887660] SyS_ioctl+0x7f/0xb0 [ 3236.891004] ? do_vfs_ioctl+0xff0/0xff0 [ 3236.894961] do_syscall_64+0x1d5/0x640 [ 3236.898833] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3236.904003] RIP: 0033:0x4665f9 [ 3236.907170] RSP: 002b:00007f6611c0e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3236.914944] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3236.922194] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 3236.929441] RBP: 00007f6611c0e1d0 R08: 0000000000000000 R09: 0000000000000000 23:20:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="f7002a0010007d8440819f776aa93d13154479e7ae12f2a549df370cce5976b16a5e8c7c871b3ea3a1efd39f7b0da6930c66926158546f5575ec6aacd33d1e5d1d9c64db317367d04d6d93ba0ece53a8bf9c3964b2043e3a4b5aa135"], 0x2c}}, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x21000065) inotify_rm_watch(0xffffffffffffffff, r2) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, r1, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=@ipv6_newroute={0x80, 0x18, 0x2, 0x70bd25, 0x25dfdbfb, {0xa, 0x10, 0x10, 0x9, 0xfd, 0x0, 0xff, 0xa, 0x2600}, [@RTA_EXPIRES={0x8, 0x17, 0x2}, @RTA_METRICS={0x35, 0x8, 0x0, 0x1, "cb3e3808e4a1e2ebb97f23442d123e783cdd8462d561920a93895f47f477570b09176227d1376fed238160439674d0acbb"}, @RTA_UID={0x8}, @RTA_MARK={0x8, 0x10, 0xd3}, @RTA_ENCAP_TYPE={0x6}, @RTA_MULTIPATH={0xc, 0x9, {0xff6f, 0x4, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x14}, 0x4) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) r4 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) inotify_rm_watch(r4, r2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x3afac646baaf4f63, 0x700, 0x9, 0x0, {{0xb, 0x4, 0x0, 0x39, 0x2c, 0x64, 0x0, 0x4, 0x4, 0x0, @broadcast, @rand_addr=0x64010100, {[@rr={0x7, 0x17, 0x28, [@loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x1f}, @remote]}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r3, 0x9e426360b1af0fc, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x7fffffff}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) 23:20:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) 23:20:47 executing program 0 (fault-call:1 fault-nth:15): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:47 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000200)=@req={0x28, &(0x7f0000000140)={'ipvlan0\x00', @ifru_settings={0x0, 0x0, @cisco=&(0x7f0000000100)={0x7, 0x4}}}}) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000080)={{&(0x7f0000000180)=""/85, 0x55}, &(0x7f0000000000), 0x54}, 0x20) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) [ 3236.936868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3236.944116] R13: 00007fffc419825f R14: 00007f6611c0e300 R15: 0000000000022000 23:20:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) 23:20:47 executing program 5 (fault-call:3 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 3237.035940] FAULT_INJECTION: forcing a failure. [ 3237.035940] name failslab, interval 1, probability 0, space 0, times 0 [ 3237.062164] CPU: 1 PID: 29688 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 3237.070171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3237.079526] Call Trace: [ 3237.082118] dump_stack+0x1b2/0x281 [ 3237.085754] should_fail.cold+0x10a/0x149 [ 3237.089904] should_failslab+0xd6/0x130 [ 3237.089919] kmem_cache_alloc_node_trace+0x25a/0x400 [ 3237.089931] __kmalloc_node_track_caller+0x38/0x70 [ 3237.089948] __alloc_skb+0x96/0x510 [ 3237.089960] mgmt_send_event+0x42/0x330 [ 3237.089977] mgmt_index_removed+0x133/0x240 [ 3237.115787] ? mgmt_index_added+0x210/0x210 [ 3237.120091] ? _raw_read_unlock+0x29/0x40 [ 3237.124219] ? hci_dev_get+0xe6/0x190 [ 3237.128001] hci_sock_bind+0xce1/0x1170 [ 3237.131958] ? hci_sock_ioctl+0x690/0x690 [ 3237.136089] ? security_socket_bind+0x83/0xb0 [ 3237.140651] SyS_bind+0x174/0x1f0 [ 3237.144105] ? SyS_socketpair+0x480/0x480 [ 3237.148241] ? wait_for_completion_io+0x10/0x10 [ 3237.152892] ? vfs_write+0x319/0x4d0 [ 3237.156610] ? fput+0xb/0x140 [ 3237.159693] ? SyS_write+0x14d/0x210 [ 3237.163386] ? SyS_read+0x210/0x210 [ 3237.167015] ? __do_page_fault+0x159/0xad0 [ 3237.171229] ? do_syscall_64+0x4c/0x640 [ 3237.175315] ? SyS_socketpair+0x480/0x480 [ 3237.179465] do_syscall_64+0x1d5/0x640 23:20:48 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000200)={@nfc_llcp={0x27, 0x0, 0x0, 0x1, 0x20, 0x3f, "b3eec0b519bf6c060f8ee0ba94f11efb75d00e29a5ab68bb37ef5ec2209c4743d1f66023dc1ccbd072acd93c123710a425e45dfb0c4ae5d7ff83068ad05783", 0xf}, {&(0x7f0000000100)=""/197, 0xc5}, &(0x7f0000000000), 0xa}, 0xa0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 3237.183360] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3237.188551] RIP: 0033:0x4665f9 [ 3237.191831] RSP: 002b:00007fa438e83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 3237.207335] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3237.214584] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 3237.221843] RBP: 00007fa438e831d0 R08: 0000000000000000 R09: 0000000000000000 [ 3237.229092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 23:20:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) [ 3237.236426] R13: 00007ffd32a5989f R14: 00007fa438e83300 R15: 0000000000022000 23:20:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0x20000000000c03, 0x600400) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000000)={0x1}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2cb3cc2d090d05fea1289bb69ce4275117b16a1b7c7900007d84f6a6eb65430fcb3536f7ed54e0378b4e5f63ad8eaa30c109de35497f331eed1ddef361ce0bc9d6711ed876727382a93aba1ec329083dbe400a41a7fc2878ddc885ed549deffbcc58bbc50f803d02de2bd95165f390170be4910e22164c4d6568422af62e6fccb9ccb6d0647e0ca0bce0d20df6b00474a53109063136c0e81ec4ca73f72c6966b5c52d91016ed85f5ba3e546816829f7ae97a162974851b6ef847b7bcf81b3c7c3ba68c3dbfbfb78e75cb08f7314d81e744dfe15ca3aea"], 0x2c}}, 0x0) 23:20:48 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) 23:20:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x82) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000030005b84fbe7adb14dc42c696421756e5f61d63da2d76eba2fc74f781337f7f0f41e0d3164cae215dacf02"], 0x2c}}, 0x0) 23:20:48 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x73389ab8, 0x2082) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x28}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8012080}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_delrule={0x30, 0x21, 0x4, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x1, 0x5, 0x0, 0x0, 0x5, 0xe}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'batadv0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000300)={0x34c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xae11}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1918}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc84a}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf139}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_NODE={0x198, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "09a1bcce728475af4754eddfd77715844fb2fa01ce827f616bebdfd60b"}}, @TIPC_NLA_NODE_ID={0xe6, 0x3, "c0afad2d1c433a6bc0cb8220eada1bcb30c543c8677c26398fa1ea7f4d5578ad789f5d03e93e2e99eee8e977bfdec8b6b5bb2dae47fb460e0f579c0239ada631d962647a42bb336b0a7e6969dba448d1de088d6139f84b1d20f943ec5c845b532999e151d877139ddee5eab3a042391fe975f5eaa29bc95661283c2d63df079833bbc4293d10f2d83423d2dedd3a6255aafb78df99c905668615d91e076bfe74259c3220fd3f5b205cced135dd4a02e4e56cb74136c655086d3b015ab864c1495a4a26329884f142dec1fbd10b74fda2574c39d053c08c7f5504acfd2f61db809f25"}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "431a98213b4391598c3217a619b06945421dfa4e05101b2d699b4e"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 23:20:48 executing program 0 (fault-call:1 fault-nth:16): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000080)={0x4, 0x0, 0x6, 0x81, 0x8}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x5, 0x0, [{0x81, 0x0, 0x0, 0x0, @sint={0x7}}, {0x1, 0x2, 0x0, 0x0, @irqchip={0x1f, 0xffffffff}}, {0x9, 0x0, 0x0, 0x0, @adapter={0x9, 0x0, 0xff8c, 0x1f, 0xff}}, {0x2, 0x5, 0x0, 0x0, @sint={0x3, 0xee}}, {0x80, 0x4, 0x0, 0x0, @msi={0xf0000000, 0xffc00000, 0x81}}]}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f00000000c0)={0x5, 0x10000, 0x7fff, 0x1, 0xa}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 3237.423546] tc_ctl_action: received NO action attribs [ 3237.462516] FAULT_INJECTION: forcing a failure. [ 3237.462516] name failslab, interval 1, probability 0, space 0, times 0 [ 3237.465373] tc_ctl_action: received NO action attribs [ 3237.487167] CPU: 0 PID: 29726 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 3237.495082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3237.504524] Call Trace: [ 3237.507119] dump_stack+0x1b2/0x281 [ 3237.510766] should_fail.cold+0x10a/0x149 [ 3237.514922] should_failslab+0xd6/0x130 [ 3237.518904] kmem_cache_alloc_node+0x54/0x410 [ 3237.523408] __alloc_skb+0x5c/0x510 [ 3237.527051] hci_sock_dev_event+0x16a/0x5f0 [ 3237.531375] ? hci_send_monitor_ctrl_event+0x500/0x500 [ 3237.536663] hci_dev_do_open+0x4fa/0xe30 [ 3237.540735] hci_dev_open+0xee/0x1f0 [ 3237.544449] hci_sock_bind+0xd16/0x1170 [ 3237.548434] ? hci_sock_ioctl+0x690/0x690 [ 3237.552586] ? security_socket_bind+0x83/0xb0 [ 3237.557085] SyS_bind+0x174/0x1f0 [ 3237.560983] ? SyS_socketpair+0x480/0x480 [ 3237.565151] ? wait_for_completion_io+0x10/0x10 [ 3237.569822] ? vfs_write+0x319/0x4d0 [ 3237.573541] ? fput+0xb/0x140 [ 3237.576652] ? SyS_write+0x14d/0x210 [ 3237.580367] ? SyS_read+0x210/0x210 [ 3237.584016] ? __do_page_fault+0x159/0xad0 [ 3237.589819] ? do_syscall_64+0x4c/0x640 [ 3237.593798] ? SyS_socketpair+0x480/0x480 [ 3237.598041] do_syscall_64+0x1d5/0x640 [ 3237.601944] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3237.607144] RIP: 0033:0x4665f9 23:20:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x72f300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:48 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) 23:20:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='s\x00\x00\x00\x00\x00\x00\x00'], 0x2c}}, 0x0) 23:20:48 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) 23:20:48 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x1, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) 23:20:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c007d840000000056f2d2a31653060bf0c3067b9feefd435b28bfb5de650bb4343f29d11df8ae7af4a5ecec31ac6a148876347f875027c42267689c"], 0x2c}}, 0x0) [ 3237.610331] RSP: 002b:00007fa438e83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 3237.618037] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3237.625310] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 3237.632619] RBP: 00007fa438e831d0 R08: 0000000000000000 R09: 0000000000000000 [ 3237.640062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3237.647333] R13: 00007ffd32a5989f R14: 00007fa438e83300 R15: 0000000000022000 23:20:48 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4, @rand_addr=0x64010100}, 0x10) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000)=""/62, &(0x7f0000000080)=0x3e) socket$nl_generic(0x10, 0x3, 0x10) 23:20:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)={0x20c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xef}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff0000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0xe}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfb21}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x24, 0x3, "514aa8b79ef37cc4601b892c9e725b685c371927131df32ceba76c903280b3fc"}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40008b1}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x2c}}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000001c0)={0x2113a4523b8fcc69, 0x0, @ioapic={0x1, 0x3, 0xf8000000, 0x3, 0x0, [{0x1, 0x9, 0x73, '\x00', 0x3}, {0x3f, 0x1, 0x3, '\x00', 0x1}, {0x3, 0x0, 0xe0, '\x00', 0x20}, {0x6, 0x3f, 0x4}, {0x0, 0xb4, 0xff, '\x00', 0x3}, {0x9, 0x5, 0x81, '\x00', 0x7}, {0xff, 0xdf, 0x8, '\x00', 0x8}, {0x8, 0x5, 0x6, '\x00', 0x9}, {0x3f, 0x20, 0x4, '\x00', 0x4}, {0x3, 0x8, 0x5, '\x00', 0x2}, {0x1, 0x2, 0xfe, '\x00', 0xdc}, {0x0, 0x3f, 0xdd, '\x00', 0x7}, {0x6, 0xfa, 0x1, '\x00', 0x20}, {0x0, 0x9, 0x8, '\x00', 0x2}, {0x7, 0x9, 0x5}, {0x9, 0xad, 0x1f, '\x00', 0x7}, {0x81, 0x5, 0x3f, '\x00', 0x1}, {0xf3, 0x44, 0x2}, {0x80, 0x62, 0x2, '\x00', 0xeb}, {0x81, 0x0, 0x6, '\x00', 0x1}, {0x2, 0x0, 0x8, '\x00', 0x6}, {0x20, 0x5, 0x6, '\x00', 0x1}, {0x4, 0x2, 0x8, '\x00', 0x3}, {0x7, 0x4, 0xfc}]}}) 23:20:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000000)={0xb11, 0x0, 0x9}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x1, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) 23:20:48 executing program 0 (fault-call:1 fault-nth:17): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000024c0)={'syztnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x2, 0x4, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8, 0x8, 0x6, 0x7fffffff}}) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000100)) 23:20:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x5, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000200)={0x9, 0x3, 0xdc5, 0xfffffffa}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x9) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000080)={0x4003, 0xf73, 0x5}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0x3, &(0x7f0000000380)={&(0x7f0000001380)={0xcc, r4, 0x400, 0x70bd29, 0x25dffbfe, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x8001}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x0, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x0, 0x1, 0xaf7}, @TIPC_NLA_NODE_ID={0x0, 0x3, "00c2de41d286f6192bea2ff84be567ba70d09183bd1e6cd5a568e7eddcaca3df990c6c5de0d6349bb21aad4377e198ea720d67baa48b978c5668a35f519aafe9066e51a138f9c9670622ec05ca94511f7308690291af09209bf159feb07019103b866f303a69f049761942ef25af517f2fa1832f586191c1b232606a8ed5616bc92f6219a269eacc795fce43a5b7f985a6debf53c28d90533d9ab98c5c20133976009c1ddb6747a6140f527646b676efee5dbcdd1261f9881e6ef54a0c53a886625b5c436e28a8fbcabe9b5f4bfb6490a2"}, @TIPC_NLA_NODE_ADDR={0x0, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x0, 0x4, {'gcm(aes)\x00', 0x0, "a70aceb0eea1d71e4c01242706f72ee30d2ed3d0f49003a2dd0511b96bba9ceb36cc"}}, @TIPC_NLA_NODE_UP]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ADDR={0x0, 0x2, 0xcb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1c6a000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000000) r6 = socket$isdn(0x22, 0x3, 0x22) getsockopt$MISDN_TIME_STAMP(r6, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, &(0x7f00000001c0)=""/1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x4, 0x3, 0xf000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 23:20:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x1, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) 23:20:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000480)=0x1, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84"], 0x2c}}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendto$isdn(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x4d, 0x0, &(0x7f0000000340)={0x22, 0x80, 0xba, 0x4, 0x7}, 0x6) socket$netlink(0x10, 0x3, 0x2) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1b, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="18350000050000000000000000000000182e0000", @ANYRES32=r2, @ANYBLOB="000000001b00000018004ab265a64e1cb5221629000003000000000000008100000018130000598937f4c4a47718f11a6fe40d17b411a4733e774cd257fe7f436ace96", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000040)='GPL\x00', 0x8001, 0x55, &(0x7f00000001c0)=""/85, 0x41100, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xf, 0x1, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) accept4$llc(r3, &(0x7f00000004c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000500)=0x10, 0x0) 23:20:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f00000001c0)=""/79) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84"], 0x2c}}, 0x0) socketpair(0x4, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf4, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9a7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0xd49cf24d5623b9eb}, 0x20000000) [ 3237.985735] FAULT_INJECTION: forcing a failure. [ 3237.985735] name failslab, interval 1, probability 0, space 0, times 0 [ 3238.057315] CPU: 0 PID: 29802 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 3238.065242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3238.074599] Call Trace: [ 3238.077287] dump_stack+0x1b2/0x281 [ 3238.080926] should_fail.cold+0x10a/0x149 [ 3238.085078] should_failslab+0xd6/0x130 [ 3238.089037] kmem_cache_alloc_node_trace+0x58/0x400 [ 3238.094034] __kmalloc_node_track_caller+0x38/0x70 [ 3238.098944] __alloc_skb+0x96/0x510 [ 3238.102728] hci_sock_dev_event+0x16a/0x5f0 [ 3238.107031] ? hci_send_monitor_ctrl_event+0x500/0x500 [ 3238.112289] hci_dev_do_open+0x4fa/0xe30 [ 3238.116329] hci_dev_open+0xee/0x1f0 [ 3238.120020] hci_sock_bind+0xd16/0x1170 [ 3238.124078] ? hci_sock_ioctl+0x690/0x690 [ 3238.128220] ? security_socket_bind+0x83/0xb0 [ 3238.132737] SyS_bind+0x174/0x1f0 [ 3238.136173] ? SyS_socketpair+0x480/0x480 [ 3238.140301] ? wait_for_completion_io+0x10/0x10 [ 3238.145042] ? vfs_write+0x319/0x4d0 [ 3238.148736] ? fput+0xb/0x140 [ 3238.151822] ? SyS_write+0x14d/0x210 [ 3238.155527] ? SyS_read+0x210/0x210 [ 3238.159744] ? __do_page_fault+0x159/0xad0 [ 3238.163963] ? do_syscall_64+0x4c/0x640 [ 3238.167921] ? SyS_socketpair+0x480/0x480 [ 3238.172049] do_syscall_64+0x1d5/0x640 [ 3238.175920] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3238.181087] RIP: 0033:0x4665f9 [ 3238.184254] RSP: 002b:00007fa438e83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 3238.191947] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3238.199232] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 23:20:49 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x30800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:49 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) 23:20:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x1, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) [ 3238.206514] RBP: 00007fa438e831d0 R08: 0000000000000000 R09: 0000000000000000 [ 3238.213775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3238.221129] R13: 00007ffd32a5989f R14: 00007fa438e83300 R15: 0000000000022000 23:20:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 23:20:49 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x88, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x50}, 0x4004010) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 23:20:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84"], 0x2c}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000000), 0x4) 23:20:49 executing program 0 (fault-call:1 fault-nth:18): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84"], 0x2c}}, 0x0) socketpair(0x2c, 0x0, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000040)={0x9, 'syz0\x00'}) bind$rds(r2, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10) 23:20:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000280)={0x1000, 0xfc5, 0x5}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000500)) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = accept(0xffffffffffffffff, &(0x7f0000000080)=@nfc, &(0x7f0000000100)=0x80) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c5800002000000829bd7000fddbdf0900008058fe00000000000000080001000a014d0208000b00040000000800010064010101080002007f00000108000b000500000014fc110076657468305f746f5f627269646765000000000005080001007f00000100000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0xc80b}, 0x4) [ 3238.463573] FAULT_INJECTION: forcing a failure. [ 3238.463573] name failslab, interval 1, probability 0, space 0, times 0 [ 3238.501462] CPU: 1 PID: 29858 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 23:20:49 executing program 1: setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000080)={{&(0x7f0000000100)=""/4096, 0x1000}}, 0x20) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 23:20:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) [ 3238.509383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3238.518743] Call Trace: [ 3238.521344] dump_stack+0x1b2/0x281 [ 3238.524990] should_fail.cold+0x10a/0x149 [ 3238.529147] should_failslab+0xd6/0x130 [ 3238.533128] kmem_cache_alloc_node+0x54/0x410 [ 3238.537629] __alloc_skb+0x5c/0x510 [ 3238.541266] create_monitor_ctrl_open+0x130/0x630 [ 3238.546113] ? hci_sock_setsockopt+0x5b0/0x5b0 [ 3238.550712] ? do_raw_spin_unlock+0x164/0x220 [ 3238.555213] ? _raw_spin_unlock+0x29/0x40 [ 3238.559372] hci_sock_bind+0xe20/0x1170 23:20:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x0, 0x202000}) [ 3238.563348] ? hci_sock_ioctl+0x690/0x690 [ 3238.567500] ? security_socket_bind+0x83/0xb0 [ 3238.571998] SyS_bind+0x174/0x1f0 [ 3238.575482] ? SyS_socketpair+0x480/0x480 [ 3238.579813] ? wait_for_completion_io+0x10/0x10 [ 3238.584497] ? vfs_write+0x319/0x4d0 [ 3238.588579] ? fput+0xb/0x140 [ 3238.591688] ? SyS_write+0x14d/0x210 [ 3238.595405] ? SyS_read+0x210/0x210 [ 3238.599045] ? __do_page_fault+0x159/0xad0 [ 3238.603378] ? do_syscall_64+0x4c/0x640 [ 3238.608341] ? SyS_socketpair+0x480/0x480 23:20:49 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000040)={{@any, 0x101}, 0x6, 0xffffffffffffffe5, 0x5, 0xffff}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000140)=0x9, 0x8) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f00000001c0)={@my=0x1, 0x3ff}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x2c}}, 0x0) [ 3238.612493] do_syscall_64+0x1d5/0x640 [ 3238.616396] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3238.621674] RIP: 0033:0x4665f9 [ 3238.624872] RSP: 002b:00007fa438e83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 3238.632934] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3238.640294] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 3238.647567] RBP: 00007fa438e831d0 R08: 0000000000000000 R09: 0000000000000000 [ 3238.654840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 23:20:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) [ 3238.662155] R13: 00007ffd32a5989f R14: 00007fa438e83300 R15: 0000000000022000 23:20:49 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="08010000110000022bbd703ffcdbdf25787868617368363400000000000000000000000000000000000000070000000000000000000000000000008d000000045f0b8b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000010000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000869081f92206f077240f87e14a0000000000000000000100000000000000000100000000000000000000000000000000000020000000000000000000000000000008000100e801000008000100000000000800010039000000080001"], 0x108}, 0x1, 0x0, 0x0, 0x40080}, 0x4000800) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 23:20:49 executing program 0 (fault-call:1 fault-nth:19): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84"], 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004080}, 0x8) 23:20:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 23:20:49 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x9, 0x0, [{0xa382, 0x5, 0x0, 0x0, @msi={0x400, 0x0, 0x5, 0x2}}, {0xc5, 0xd820fb5d602b240b, 0x0, 0x0, @msi={0xfa78, 0x6, 0x5, 0x1}}, {0x10001, 0x0, 0x0, 0x0, @msi={0x8, 0x0, 0x7, 0x1}}, {0xfff, 0x4, 0x0, 0x0, @msi={0x9, 0x200000, 0x3, 0x8}}, {0x9, 0x4, 0x0, 0x0, @msi={0x8000, 0x1000, 0x20, 0xffffffff}}, {0x6, 0x4, 0x0, 0x0, @msi={0x2, 0x9dcd, 0x7fffffff, 0xfff}}, {0xffffff53, 0x1, 0x0, 0x0, @adapter={0xb782, 0x9, 0x5, 0x5, 0x6}}, {0x6, 0x4, 0x0, 0x0, @sint={0xdb, 0x7ff}}, {0x8, 0x5, 0x0, 0x0, @msi={0xffff, 0x2, 0xfff, 0xfc}}]}) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 23:20:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) [ 3238.851677] FAULT_INJECTION: forcing a failure. [ 3238.851677] name failslab, interval 1, probability 0, space 0, times 0 [ 3238.879415] nla_parse: 15 callbacks suppressed [ 3238.879422] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3238.908021] CPU: 0 PID: 29914 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 3238.916183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3238.926316] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3238.926496] Call Trace: [ 3238.926517] dump_stack+0x1b2/0x281 [ 3238.926531] should_fail.cold+0x10a/0x149 [ 3238.945466] should_failslab+0xd6/0x130 [ 3238.949471] kmem_cache_alloc_node_trace+0x58/0x400 [ 3238.954587] __kmalloc_node_track_caller+0x38/0x70 [ 3238.959529] __alloc_skb+0x96/0x510 [ 3238.963164] create_monitor_ctrl_open+0x130/0x630 [ 3238.968013] ? hci_sock_setsockopt+0x5b0/0x5b0 [ 3238.973152] ? do_raw_spin_unlock+0x164/0x220 [ 3238.977651] ? _raw_spin_unlock+0x29/0x40 [ 3238.981840] hci_sock_bind+0xe20/0x1170 [ 3238.985814] ? hci_sock_ioctl+0x690/0x690 [ 3238.990143] ? security_socket_bind+0x83/0xb0 [ 3238.994643] SyS_bind+0x174/0x1f0 [ 3238.998101] ? SyS_socketpair+0x480/0x480 [ 3239.002262] ? wait_for_completion_io+0x10/0x10 [ 3239.007196] ? vfs_write+0x319/0x4d0 [ 3239.010906] ? fput+0xb/0x140 [ 3239.014017] ? SyS_write+0x14d/0x210 [ 3239.017714] ? SyS_read+0x210/0x210 [ 3239.021327] ? __do_page_fault+0x159/0xad0 [ 3239.025547] ? do_syscall_64+0x4c/0x640 [ 3239.029504] ? SyS_socketpair+0x480/0x480 [ 3239.033632] do_syscall_64+0x1d5/0x640 [ 3239.037505] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3239.042761] RIP: 0033:0x4665f9 [ 3239.046451] RSP: 002b:00007fa438e83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 23:20:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES64=r1, @ANYRESDEC, @ANYRES32=r3, @ANYRES16=r4], 0x2c}}, 0x4008000) getsockname(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000100)=0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r5) 23:20:50 executing program 1: r0 = socket$isdn(0x22, 0x3, 0x11) bind$isdn(r0, &(0x7f0000000200)={0x22, 0x3f, 0x7f, 0x8, 0x3f}, 0x6) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000080)={{&(0x7f0000000100)=""/201, 0xc9}}, 0x20) bind$rds(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 23:20:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) 23:20:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xd9530318b0f75c76, &(0x7f0000000100)=""/4096, &(0x7f0000001100)=0x1000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82201, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000000)={0x0, 0x20}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r3, 0x8040ae69, &(0x7f0000001380)={0x0, 0x1, 0x0, 0x3, 0x3}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000001140)) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) 23:20:50 executing program 0 (fault-call:1 fault-nth:20): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) [ 3239.054530] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3239.061781] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 3239.069134] RBP: 00007fa438e831d0 R08: 0000000000000000 R09: 0000000000000000 [ 3239.076386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3239.083638] R13: 00007ffd32a5989f R14: 00007fa438e83300 R15: 0000000000022000 23:20:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x4, 0x4) 23:20:50 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) eventfd(0x1) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000080)={{0x6, 0x8}, 0x50}, 0x10) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x401, 0x80000000, r2}) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 23:20:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 23:20:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84"], 0x2c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x13) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84804}, 0x4) 23:20:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f0000000000), 0x3, 0xffffffffffffffff, 0xe}) 23:20:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = accept(r0, &(0x7f0000000000)=@in={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x16e, 0x4) 23:20:50 executing program 1: ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) [ 3239.361241] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 23:20:50 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/239, 0xef}, {&(0x7f0000000200)=""/232, 0xe8}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, &(0x7f0000001540)=[@rdma_dest={0x18, 0x114, 0x2, {0x4, 0x8}}, @rdma_dest={0x18, 0x114, 0x2, {0x80000001, 0x6446}}, @rdma_dest={0x18, 0x114, 0x2, {0x3, 0x5}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001300)=""/74, 0x4a}, &(0x7f0000001380), 0x4c}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000013c0)=""/23, 0x17}, &(0x7f0000001400), 0xb}}, @rdma_dest={0x18, 0x114, 0x2, {0x9, 0x3}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x3b}, @zcopy_cookie={0x18, 0x114, 0xc, 0xffffffff}, @mask_fadd={0x58, 0x114, 0x8, {{0x3a, 0x2}, &(0x7f0000001440)=0x6, &(0x7f0000001480)=0x6, 0x0, 0xfffffffffffffffa, 0xfffffffffffffff8, 0xffffffffffffff4c, 0x8, 0x2ee5}}, @cswp={0x58, 0x114, 0x7, {{0x800, 0x8000}, &(0x7f00000014c0)=0xb9, &(0x7f0000001500)=0x4, 0xd4, 0x2, 0x800, 0x3, 0x51, 0x7fff}}], 0x1a0, 0x800}, 0x800) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4) 23:20:50 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@hyper, 0x401}, 0xcc, 0x7a22, 0x5, 0x21a, 0xf0, 0x80000000, 0x7, 0x6}) getpeername$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = socket$isdn(0x22, 0x3, 0x24) sendto$isdn(r2, &(0x7f0000000100)={0x8, 0x8684, "dd0fc2c9b596d283c5722ac05a4f567f09b3f4c4cb0239a3302859cdfa1b6a0e8fe229aa06437e42bc1c932f7ae1d3786108083f81bfdfe6f12c7f07910e020c3d7499852f3fe3885f605d7db0a3dc71601ed6365dfa2c0c5fced27e4ec2a7ee4829"}, 0x6a, 0x4008080, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x110000, 0x0) 23:20:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x3, 0xffffffffffffffff, 0xe}) [ 3239.486513] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 23:20:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000080)={0x0, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x1c) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000000)={0x8, 0x0, 0x7f, 0x5}, 0x10) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x2, 0x0, @ioapic={0x10000, 0xfffffffc, 0x2, 0xf69, 0x0, [{0xd0, 0x6, 0x8}, {0x7, 0x1b, 0x80, '\x00', 0x9}, {0x1, 0x0, 0x6, '\x00', 0x3}, {0x8, 0x80, 0x8, '\x00', 0x7f}, {0x5, 0x2, 0x7f, '\x00', 0x3f}, {0x3, 0x5, 0xff, '\x00', 0x4}, {0x4, 0x9, 0x1f, '\x00', 0x4}, {0x9, 0x1, 0x0, '\x00', 0xf9}, {0x1f, 0x40, 0x3, '\x00', 0x6}, {0x40, 0x6, 0x0, '\x00', 0x1}, {0x5, 0x5, 0x6, '\x00', 0x1}, {0xff, 0x3, 0x6, '\x00', 0xfe}, {0xc3, 0x80, 0x81, '\x00', 0x4}, {0x7, 0x2b, 0x9, '\x00', 0x3}, {0x4, 0x0, 0x1f, '\x00', 0x8}, {0x7, 0x2, 0x71, '\x00', 0x3}, {0x2, 0x5f, 0x0, '\x00', 0x5}, {0x6, 0xfc, 0x2, '\x00', 0x6}, {0x0, 0xa3, 0x3, '\x00', 0x6}, {0x9, 0x1f, 0xf2, '\x00', 0x3}, {0x1c, 0x89, 0x1f, '\x00', 0x1}, {0x81, 0x0, 0xff, '\x00', 0x9}, {0x0, 0x5d, 0x80, '\x00', 0x6}, {0x9, 0x3, 0xa5, '\x00', 0x1f}]}}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:50 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/216, 0xd8}, {&(0x7f0000000300)=""/193, 0xc1}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/126, 0x7e}, {&(0x7f0000000540)=""/90, 0x5a}, {&(0x7f00000005c0)=""/238, 0xee}, {&(0x7f00000006c0)=""/155, 0x9b}, {&(0x7f0000000080)}], 0xa, &(0x7f0000000940)=[@mask_cswp={0x58, 0x114, 0x9, {{0x7, 0x9}, &(0x7f0000000840)=0x1, &(0x7f0000000880)=0x5, 0xf2bb, 0x4, 0x8001, 0x1, 0x9, 0xffff}}, @fadd={0x58, 0x114, 0x6, {{0x1, 0xffffffff}, &(0x7f00000008c0)=0x5, &(0x7f0000000900)=0x8, 0x3, 0xf0, 0x6, 0x3f, 0x0, 0x1}}], 0xb0, 0x40000}, 0x800) 23:20:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) 23:20:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000fddbdf25110000003800058007000100696200002c000280080002000302000000000008000200ff0f000008000400000000007c0dd9524f3ec66eeac26980a00acc4229f65a752576625ae511fb0ebc3b30bb34"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xe}) 23:20:50 executing program 2: syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000010007d840af3e742f1b3ebc22977a49a52ff41f09899ff022c03d53c94de065a4732ea7be34bc8aff1aecf9dedf92424ea2bc126a4e62894b917b3b54d57aaf9107382f055b56fcfa11849e4e73e29be2f6abac770c643dcb8a5d49fd0c462948304708f8610f4b473cc3b31dbb00b14790ed9c6d35fdcaef46a8fd1c49088bce8c81ab8a9fbd6"], 0x2c}}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) socketpair(0x1a, 0x4, 0x3, &(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000400), 0x4) getsockname(0xffffffffffffffff, &(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x80) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000300)={@can={0x1d, r2}, {&(0x7f0000000240)=""/95, 0x5f}, &(0x7f00000002c0), 0x18}, 0xa0) 23:20:50 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{0xffffffe1, 0x3ff}, 0x8}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) r2 = accept(r0, &(0x7f00000001c0)=@x25, &(0x7f0000000240)=0x80) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000280)={0x1, 0x3ff, 0x0, @multicast, 'wlan0\x00'}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000180)={0xff, 0x1}) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080), 0x4) getpeername$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000140)=0x10) 23:20:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x438, r1, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x328, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc6, 0x3, "8ac7d5897b532186d22ed4ed13eba9cc95a67ae6c24fc360ebcc7de9f70e8d178e9d813bdfb10106975bbb7f45c40cdd3e284f572f20a7ff185d3f0c1086f6ebe9acc762f9c2e04a7ed7bbbe42610b2c949e8eaf5a0414ca9ecc648a9ea4c3002a86c256c0dfcfb84746c9826544b4bcfe8b9bbdb1bf38c83b786f8fcffd8a54ffe4c97d686df4ab2c33438e40204961f5b385aec271a0ef16d63cc5dccceab4d2335739717d3f0021b1e409d9beb01396323ed8b2a30a53ae7efda58cecc77d8e83"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "bedcd91f8dcf4e5377b7bcff7c58c2f075cdbfe03dad3cdd470654"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xf5, 0x3, "368b61dd3e8abf9316f83978c7f34954bc6ff624cf5fec374757907c3127c432b032a4f9196b901337221e374b4bb1e4c94049515321a6d454026d6286ee40b1d84ff77e34f549442e7fb61220a093dc9f86b516523fff67e619ee77edeed93fa998eb27cdba741e5aecc189861049e9a8bcf92f65b832829d9fc76e200646d7cb14d5c5fffed00dc5b0dc8f8a3977e661e8d7f878b6381e39373d8c12ce57227e52408e5a51467e7daf6700271b91c83a6eb959a5639f655f4ee57356b2acb2e390433bd4dd16d6c88a08367aefdeb62640fde50b2abf223adc10a49eee5325a0278d5b7636cb35ac8f2c39dba158119a"}, @TIPC_NLA_NODE_ID={0xc9, 0x3, "2728acf99b5dd3734d706fa1bd127b71e432ad23dd3cf8eb1f99533a0e4606e5fd47c25b885a3a5f27a02d1e1caec630f3fce278fe3391508d5aefb58afa79bb59795988c5e812b21ddff75e970bee88f201b00a20db3759505ab20370c51c3b8e0ca0ab5d9511621ea47510306974c5d295ba07016397ba6ee5247fad77901b60ebd7d6b8981327d8872af7d9e067bfcadd591f0d332ce384ff1b6b05e5a6fde86b04bded1680246193294ad0ba5900b7f6f5f57fed1efaecc00c019b926e1be54be23a05"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "38741ce7ab29d14bb70b6eaa3d7e4df5fa0ca5524f381ad7330543dd9aef"}}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdb7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x70dd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x14}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x438}, 0x1, 0x0, 0x0, 0x4000005}, 0x20040090) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000040)={0x4000, 0x0, 0x7, 0x100, 0x7}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f00000005c0)={0x3}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xe}) 23:20:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000040)="2d36e672693f3ad133f4ed7b7e4282b06d9ef9d116d9ebb69fbf3305b3c6d500daa352410ea3d6e7db31fd7c79d63a5e01a4a80e45a046bce7702d") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000080)) 23:20:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84"], 0x2c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x7800, 0x40, 0x6, 0x8, {{0xb, 0x4, 0x2, 0x3b, 0x2c, 0x64, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x4a, [@loopback]}, @rr={0x7, 0xb, 0xf8, [@broadcast, @multicast2]}]}}}}}) 23:20:50 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000080)=0x3, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f00000000c0)=0x4002) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000000)={0x10000, 0x3f}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 23:20:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f00000000c0)="e5") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 23:20:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x10}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x38}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x1e, 0x80000, 0x2, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4}, 0x6) [ 3239.856836] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 23:20:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xe}) [ 3239.920990] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 23:20:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0x4}, 0x6) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)={0xfffffffa, 0x81}) r1 = syz_open_dev$audion(&(0x7f0000000580), 0x7, 0x107741) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000080)={0x3, "e927a0"}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @read_auth_payload_to={{0xc7b, 0x2}, {0xc9}}}, 0x6) 23:20:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x18302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, [0x0, 0xa9, 0x0, 0x7770]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000100)={[{0x2, 0x101, 0x9e, 0x6, 0x2, 0x7, 0x2, 0x1, 0x7f, 0x2, 0x40, 0x3f, 0x31}, {0x101, 0x3, 0x6, 0x2, 0xe, 0x1f, 0xff, 0x7, 0xac, 0x99, 0x2}, {0x1, 0x1, 0x40, 0x3, 0xb5, 0x4b, 0x9, 0x3, 0x0, 0x78, 0x80, 0x46, 0x1}], 0x3}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000080)={0xfffc, 0x6}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000040)={0x46b, 0x2, 0x9, 0x1, 0x200}) 23:20:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x0) 23:20:50 executing program 1: setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$rds(r1, &(0x7f00000000c0)={0x2, 0xfffc, @private=0xa010102}, 0x10) r2 = syz_open_dev$audion(&(0x7f0000000080), 0xc04, 0x60401) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000000)={{0xb0, 0x5}, 0x60}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0xff, 0xff, 0xaaef, 0x4, @private2, @loopback, 0x10, 0x1, 0x7f, 0x3eff}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x64, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000812) 23:20:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x1, 0x8a2, &(0x7f0000000000)="7993fec9111e7187a5a84b04", &(0x7f0000000100)="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", 0xc, 0x1000}) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000001100)) 23:20:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc) 23:20:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0}) 23:20:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe4, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1d6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8a61}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 23:20:51 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x154, r0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xcc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x480}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff34}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6ede01a9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x88a1276}]}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x48084}, 0x20000000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept(r2, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f00000000c0)=0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)={0x240, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9e}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}]}]}, @TIPC_NLA_NODE={0x1c8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "223f6761955c3c6f89ed22b467c17c07e1671deca11d62198c95daec20b3f2e5"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "bc24ecf9122bc6950be26f267ee8f8f2ac2febc83a4293ee44ad908779568377b54f4983"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "1d276b85dbbb11a0586969e88deb61ec444f02ae133ce6"}}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "e6b7dd202d8445f8809a6bfd579a532d257f81b60188368b225f40c7131ede4352f2461e0e5143abd7f62d0ff2bc4a6c83b8fcd796a4759637efb5a965f6cd35de7d820957e988f270803047b0703775692c3a7a95194ae7e2799ff66f2af4f348ed9553b532414a730d8391f817c4d84d7acebad741d929a268886200764455063a93ebd47a1e1c8e6a489c165de8b09dab467ecbadc8d32eaec951001e7efff9"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "aa5c528a6863703b3cae9291ed86d770fcf19295b537a0"}}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x44000}, 0x20048010) r5 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r5, 0x4040ae70, &(0x7f0000000100)={0xd27e, 0x0, 0x7ff}) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:51 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) accept(r2, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000300)=0x80) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xbc, r6, 0x205, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x56}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc1b8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x64}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc000}, 0x20008800) 23:20:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x2c}}, 0x54d2791943759423) 23:20:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfb, 0x8000}, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000180)="4f2a610a0941c314cfe2c7656f5c4fda7bfd48a16d76f2f5bb29e0e9b45329a1a763eb9a66d41b4ef7a2e652767fbb35edfbe88e90ada44bf9fb34d0ea21e03538a8267887a6094d14bd624d2aa21d45847b1a0c61035e547f55a76f54d31201e99ec513622ddd87b6a54aad6c817b72ea5f361df0c12f177f06aa2b0e0d5b233eb2e27285f4adedac726f4422e08807ade6427ae880699f95fcaad7ea6c810c48e5091b7a16b0022b295898073b4c5155e645229da07f837634") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c5d221e004000300005ff0300f459ccd78626ea633ec71a6983d7d758163c7c5bd264f52277a0857ba9211237e1ced2b500f655b96f5ab15b28c8a3b2ad517ccc4958f0874c0ac73abcdf534da0aa9b0f89fbb59b10188a1ea1a46d225aa312600920dcb544a4e75f5e377c43853f8e926b0e8fa1de8da8d30fc10e5a7d006e9ea5fa34cd12299f971210fdf832bb33971bf9da7cb19dba7e176fe482ca501f2d30ead0ffff00000000000084e3b503d1b06a3aaf"], 0x2c}}, 0x0) 23:20:51 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x234c00) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6) socketpair(0x2b, 0x6, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x9448d8d0478d8991, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x20008004) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f00000001c0)={0xfffffffd, 0xc89edfa, 0x2, 0x6, 0x7}) 23:20:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000100)={r1, 0x2, 0xa92, "2b2caf91a21ee8dc2e8d7a736644a8183243b5a175e5dcc1919895f065992830b4d98b79fb5984f7782998d37acb800e75258ffab56b5910d4bd17ce50362b4632cbb1fd085cc2e9598516c7d6b6f658f849e7894cddd58c050235eb6b3f"}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000080)={0xd000, 0x1b000}) r5 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$l2tp(0x2, 0x2, 0x73) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) 23:20:51 executing program 1: ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000080)={0x5000, 0x2000}) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000240)={{&(0x7f0000000100)=""/227, 0xe3}, &(0x7f0000000200), 0x8}, 0x20) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) r1 = socket$netlink(0x10, 0x3, 0x1a) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x7, 0x700, 0x6, 0xfffffffd, {{0x17, 0x4, 0x1, 0x30, 0x5c, 0x67, 0x0, 0xff, 0x2, 0x0, @rand_addr=0x64010102, @loopback, {[@noop, @timestamp_addr={0x44, 0xc, 0x8d, 0x1, 0xe, [{@loopback, 0x6}]}, @noop, @end, @lsrr={0x83, 0xf, 0x9c, [@multicast2, @empty, @private=0xa010100]}, @noop, @ssrr={0x89, 0x13, 0x58, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}]}, @ssrr={0x89, 0x13, 0x43, [@rand_addr=0x64010101, @local, @empty, @private=0xa010102]}, @end, @end]}}}}}) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000700)={0x0, @can, @isdn={0x22, 0x1, 0x9, 0x7f, 0x53}, @xdp={0x2c, 0x6, r3, 0x3a}, 0x3f, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x7fff, 0x1, 0x3f}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x2c0, r4, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "8a686f4a55bfcbb3d995a448d86ff6e16ec84318ac2641ded3c3b203b8d4"}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffff9f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff81}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_ID={0x6d, 0x3, "19e4d02e72d5b4b798fe2a8c4e697cb89c6fe0646545fadb93d566ec482f3ce75cc5b0d23b816be3863ef7b3b507276cc48ef51004168d34bbd2dbb3a362efb9e2e6984ce1fb5b52fab9edd0976d96b9bb1830f985ccb20a4ae88cf43723d0c123f9083428de472379"}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x45, 0x3, "6446ec3952e4f28499b0983e97f4e5343a7012db63a0b5871980e770ae1c1db54e6c5f385d89fb7b83197b4f5a5b0dc81b1a938c5daa0b4a7004215529b6dee977"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x700000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5d37}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbe}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb0}]}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x44}, 0x800) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 23:20:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x2}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0x4, 0x4, '4HD', 0x0, 0x5}) 23:20:51 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 23:20:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0}) 23:20:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84"], 0x2c}}, 0x0) r1 = accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80800) accept4$vsock_stream(r1, &(0x7f0000000240)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, r4, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffff8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) 23:20:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000040), 0xa1, 0x10800) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000080)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) [ 3240.439483] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 23:20:51 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000013c0)={{&(0x7f00000012c0)=""/164, 0xa4}, &(0x7f0000001380), 0x1}, 0x20) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080)=0x2, 0xfffffffffffffeda) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000001200)={@in6={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7}, {&(0x7f0000000040)=""/40, 0x28}, &(0x7f00000011c0)}, 0xa0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000001100)={@nfc_llcp={0x27, 0x1, 0x0, 0x3, 0x5, 0xff, "810eb062dc01d725d6826f68d1449067f9d5a2391d5aa905ba7ac6230861be3d7060d15f5de7e5119755265c5bf2a55f078f06c16cdc26f700", 0x2c}, {&(0x7f0000000100)=""/4096, 0x1000}, &(0x7f0000000000), 0x29}, 0xa0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001400)={{{@in6=@private2}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000001500)=0xe8) 23:20:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84"], 0x2c}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) accept(r1, &(0x7f0000000300)=@qipcrtr, &(0x7f0000000380)=0x80) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0xc00200}, 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x50) sendmsg$nl_crypto(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delrng={0x10, 0x14, 0x4, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6914}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x460}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) 23:20:51 executing program 1: socketpair(0x1a, 0x80000, 0x3ff, &(0x7f0000000100)={0xffffffffffffffff}) bind$vsock_stream(r0, &(0x7f0000000140), 0x10) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r2 = syz_open_dev$audion(&(0x7f0000000180), 0x0, 0x80242) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = accept(r0, 0x0, &(0x7f00000001c0)) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000200)={0x2, @local}) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000000)={{0x7fff, 0x3}, 0x44}, 0x10) [ 3240.518562] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 23:20:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0}) 23:20:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000040)={r1, 0x3, 0x7, "83db99050c35ecd79e6add71da2afbba2611d122afd90d7c05b57624d6e4794e2d266830548264f8d8437f223fd84f18421854a801aac260907abd8d"}) ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000100)={'veth0_to_hsr\x00', @ifru_settings={0x0, 0x0, @sync=&(0x7f00000000c0)={0x0, 0x5}}}) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000140)={0x6, [0xfffff001, 0x1], 0x7}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) [ 3240.601829] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3240.635719] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 23:20:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000080)) 23:20:51 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) 23:20:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xfffd, 0x1}, 0x6) 23:20:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84"], 0x2c}}, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f0000000000)={@hyper, 0xc28}) 23:20:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 23:20:51 executing program 3: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 23:20:51 executing program 2: bind$isdn(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x9, 0x7f, 0x6e, 0x40}, 0x6) bind$isdn(0xffffffffffffffff, &(0x7f00000000c0)={0x22, 0x80, 0x6, 0x0, 0x80}, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r1], 0x2c}}, 0x0) 23:20:51 executing program 0: connect$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4014}, 0x20000800) r1 = syz_open_dev$audion(&(0x7f0000000180), 0x0, 0x8000) sendmsg$nl_crypto(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=@alg={0xe0, 0x10, 0x10, 0x70bd2a, 0x25dfdbfd, {{'rfc4543(rfc4106(essiv(rfc4106(gcm(aes)),xcbc(aes))))\x00'}, '\x00', '\x00', 0x2400}}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x4000) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x1}, 0x6) r2 = syz_open_dev$audion(&(0x7f0000000380), 0x8, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000003c0)={0xffffffffffffffff, 0x4, "7c228f", 0x9, 0x6}) 23:20:51 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x4) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{0x101, 0x9}, 0x22}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) 23:20:51 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000240)={0xa, &(0x7f0000000100)=[{0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {}, {0x0, 0x0, 0x0, @remote}, {}, {}, {}, {0x0, 0x0, 0x0, @multicast}]}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair(0x2c, 0x2, 0x10001, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$rds(r1, &(0x7f0000002a80)={&(0x7f00000002c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000300)=""/33, 0x21}, {&(0x7f0000000340)=""/213, 0xd5}], 0x2, &(0x7f0000002940)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000480)=""/4096, 0x1000}, &(0x7f0000001480), 0x10}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x252635ec}, @mask_fadd={0x58, 0x114, 0x8, {{0x4, 0x8571}, &(0x7f00000014c0)=0x3, &(0x7f0000001500)=0x10000, 0xffffffffffff0001, 0x7, 0x4, 0x8, 0x6, 0x800}}, @rdma_args={0x48, 0x114, 0x1, {{0x2, 0x401}, {&(0x7f0000001540)=""/43, 0x2b}, &(0x7f0000002840)=[{&(0x7f0000001580)=""/162, 0xa2}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/175, 0xaf}, {&(0x7f0000002700)=""/58, 0x3a}, {&(0x7f0000002740)=""/196, 0xc4}], 0x5, 0x3f, 0xfffffffffffff800}}, @fadd={0x58, 0x114, 0x6, {{0xff, 0x2}, &(0x7f00000028c0)=0x94, &(0x7f0000002900)=0x9, 0x6, 0x0, 0x8b11, 0x7ff, 0x9, 0x7}}], 0x140, 0x4041}, 0x40) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x7fffffff, 0x2000) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080), 0x4) 23:20:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000010007d84d6d5cddd6454025264239f14246b00aac7a630cd4b00e80bcd7e4317674c290bea04000000000000004dda3ae5a2fa41261dd5f4e46f6ce879a38add1a09645ba047976aa884d30ee183873d45efa8eaf5a373bfd619b9f1672c8b94dfe21f782ac94c9d1ac0e454e2231ee7a4fc07e173e398200178ec227e77eb750d419b4808cb158f1714fc2d6c2fa19a446bda566bafa9977c68f6b6db0460072e46f95b0774452df10e14bd"], 0x2c}}, 0x0) recvfrom$llc(0xffffffffffffffff, &(0x7f0000000180)=""/183, 0xb7, 0x40010100, &(0x7f0000000100)={0x1a, 0x320, 0x2, 0xfe, 0x0, 0x2}, 0x10) 23:20:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x7, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x1, 0x3ff, "b3b4ac", 0x4, 0x7}) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, &(0x7f0000000080)) 23:20:52 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000200)={@in={0x2, 0x4e21, @loopback}, {&(0x7f0000000100)=""/210, 0xd2}, &(0x7f0000000000), 0x10}, 0xa0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 23:20:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000010007d84ff7fd071908fc23b85760e2332a633aa8379ff53d818d429938c06642e11880215435c506dfd45c6c36a53c2d560d8671229f0f2813553a324d49a69e50cec8b0a5e7fd16575c3cf19547d181caa60f664c8af000b9c79978c9d03afce5371e7c2b40d3e0b1cce76a30cbd0c1e4e3567dc4517885eb6544d9bce238d13aebfecd840955f45beade529ecdbf055bdb7a792faa4120b9505a2c62554cd162b6624b9603e81e05c8aa2075b1179eec059269e847f10e292c3a0c494410daaf46f90d8082d30f2738d47d69bfc924fe22545cf3c7ef46b7eebdfc9c0ec8dd7776f1639dd219b36c892"], 0x2c}}, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0xf1, 0x1f, 0x1, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}, @private2, 0x80, 0x40, 0x2, 0x4}}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000340)={0x0, @ipx={0x4, 0x2, 0x6, "556aa1d645cb", 0xff}, @xdp={0x2c, 0x3, r1, 0x39}, @ipx={0x4, 0x81, 0x80000001, "b6445a18e199", 0x5}, 0x200, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000300)='ipvlan0\x00', 0x8, 0x1, 0x3}) 23:20:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 23:20:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000100)={r1, 0x2, 0xa92, "2b2caf91a21ee8dc2e8d7a736644a8183243b5a175e5dcc1919895f065992830b4d98b79fb5984f7782998d37acb800e75258ffab56b5910d4bd17ce50362b4632cbb1fd085cc2e9598516c7d6b6f658f849e7894cddd58c050235eb6b3f"}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000080)={0xd000, 0x1b000}) r5 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$l2tp(0x2, 0x2, 0x73) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) 23:20:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84"], 0x2c}}, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x80000) 23:20:52 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 23:20:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x44890) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f00000000c0)={0x1ff, 0x7}) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0xdbc7, 0x1f80, 0x81, 0x9, 0x9, 0x7, 0x81, 0x6c, 0xa8, 0x1, 0x9, 0x0, 0x1}, {0x3, 0xff, 0x2, 0x9, 0x30, 0x1f, 0x0, 0x1, 0x9, 0x1, 0xc0, 0xc2, 0x7fff}, {0x8, 0x3f, 0x3, 0x2, 0x7, 0x4, 0xff, 0x81, 0x7, 0x2, 0x40, 0x3, 0x7fff}], 0x8}) r4 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r4, 0x4010ae74, &(0x7f00000002c0)={0x2, 0xfffffff8, 0x1}) 23:20:52 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e25, @loopback}, 0x10) 23:20:52 executing program 2: ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000040)={{@my=0x0, 0x8}, @host, 0xc, 0x3ff, 0x3, 0x7, 0x24f, 0x200, 0x80000001}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="26222e983843bfee9e0d2f4726f8e46a4dba336070f6e76070953e01e373b6daace59ae3fdfbbf3ae5d4981bc7ebf9bf6aa59cfeb9f93c9f14995b5c0232a57dec2b66025a1067d1ec014c843213a1f37149f5b84b4fc97ba0c0ca472ae55c1242b45f620879c6d6a18a4e01ca5e9bd407ea075bb601cd4e0780000000a648fd77216f60c29a6e67899e1addc4f21feadb4b2025c9df7df105f84e79e57e0d757bdfe3ad290098"], 0x2c}}, 0x0) 23:20:52 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000000)={0x6, 0x0, 0x1000, 0x601}) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 23:20:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000000)) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000040)=0x81) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$llc_int(r4, 0x10c, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0xf, 0x5, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000080)={0x4005, 0x3, 0x10001, 0x8}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="46fe7595a9158f2ce5f794ba743e4f58825ec27e8448dd50cbee0a14d8e221237267f2a313a98703b81ed76daf198ad1a9d82a63d1a23c5e4bd39bdafde6878aa869642b12950c6b46c9767adf63e332c0c1956be4f0873898df9d663f9d418ed9e5747de39eb07ff6624a625902eb7a"], 0x2c}}, 0x0) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) 23:20:52 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000040)={r1, 0x3, 0x7, "83db99050c35ecd79e6add71da2afbba2611d122afd90d7c05b57624d6e4794e2d266830548264f8d8437f223fd84f18421854a801aac260907abd8d"}) ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000100)={'veth0_to_hsr\x00', @ifru_settings={0x0, 0x0, @sync=&(0x7f00000000c0)={0x0, 0x5}}}) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000140)={0x6, [0xfffff001, 0x1], 0x7}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x1f}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:52 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000300)={0x3, "8c37d0"}, 0x4) sendmsg$rds(r1, &(0x7f0000001780)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000080)=""/15, 0xf}, {&(0x7f0000000100)=""/86, 0x56}, {&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/75, 0x4b}, {&(0x7f00000017c0)=""/88, 0x58}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/232, 0xe8}, {&(0x7f0000001480)=""/171, 0xab}], 0x8, &(0x7f00000016c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x20}, @zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @mask_fadd={0x58, 0x114, 0x8, {{0x1, 0x8000}, &(0x7f00000015c0)=0x4, &(0x7f0000001600)=0x1, 0x1f, 0x3ff, 0x6, 0x80000001, 0x29, 0x422}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001640)=""/3, 0x3}, &(0x7f0000001680), 0x14}}], 0xb8, 0x4000840}, 0x4000080) 23:20:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2c0042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000100)={r1, 0x7, 0x7fff, "8526a6eac1aa006b4207c9397654f9ee768f2b41401150140d9b26d1cab2572c200759d5bb02ef77defe3e32a7a17e694bd84a20704356e8a073d44f225f7d67c0d5df771b276e113c65d20419e983d515afab74676bbb4db98f5b0c1903077f46671b7f533fbc3f94b61519de2a450bc950e002ae37c4875f4356b7174ed441d65c6d08895829dd5529a3c2a770541db1d8d918468f1f66b01a2b68233449775226b51fc8fb5846147f1eb7a61fc4491a43f2961afde7d429f266f6d4996de95f124c2b1a2512ba0ab970c9978e00ac7fe1962a037a49913629682f606fc41bfe314b57e2083585d509c3f3e43405380d"}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000040)=0xf000) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000000)={0x0, 0x3, 0x200, 0x4, 0x81}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20002, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000240), 0xc03, 0x100) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x4048091}, 0x6) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r5, 0xae44, 0x60e) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000080)={0x5, 0x40, 0xcd5a, 0x2, 0x7}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) 23:20:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000000)={0x0, 0x6, 0x7, 0x200}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84"], 0x2c}}, 0x0) 23:20:52 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000040)={r1, 0x3, 0x7, "83db99050c35ecd79e6add71da2afbba2611d122afd90d7c05b57624d6e4794e2d266830548264f8d8437f223fd84f18421854a801aac260907abd8d"}) ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000100)={'veth0_to_hsr\x00', @ifru_settings={0x0, 0x0, @sync=&(0x7f00000000c0)={0x0, 0x5}}}) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000140)={0x6, [0xfffff001, 0x1], 0x7}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:52 executing program 1: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x10001, 0xffffffff}) write$6lowpan_control(r0, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 23:20:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x40000) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x2f0, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe84}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4ad528a1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x85fa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe91}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1646}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc056}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x30a}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb33}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d605ed184ff0ffd33c0ebdeddfdd9bfb7b4b531236492dd79f"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd323}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9e2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcf3b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff00000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5ce}]}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x2f0}}, 0x20000000) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000040)={0x2, 0x7f}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000480)) 23:20:52 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000040)={r1, 0x3, 0x7, "83db99050c35ecd79e6add71da2afbba2611d122afd90d7c05b57624d6e4794e2d266830548264f8d8437f223fd84f18421854a801aac260907abd8d"}) ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000100)={'veth0_to_hsr\x00', @ifru_settings={0x0, 0x0, @sync=&(0x7f00000000c0)={0x0, 0x5}}}) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000140)={0x6, [0xfffff001, 0x1], 0x7}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000580), 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f00000000c0)=0x30b, 0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000080)={0x5, 0x802, 0x7fff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'erspan0\x00'}) setsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000040)=0x10001, 0x4) syz_init_net_socket$llc(0x1a, 0x6, 0x0) 23:20:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00'}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x14040) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x10000, 0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84"], 0x2c}}, 0x0) 23:20:53 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) socket$rds(0x15, 0x5, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @multicast}]}) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 23:20:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000040)={r1, 0x3, 0x7, "83db99050c35ecd79e6add71da2afbba2611d122afd90d7c05b57624d6e4794e2d266830548264f8d8437f223fd84f18421854a801aac260907abd8d"}) ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000100)={'veth0_to_hsr\x00', @ifru_settings={0x0, 0x0, @sync=&(0x7f00000000c0)={0x0, 0x5}}}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x2c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000024c0)={'syztnl0\x00', 0x0}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000480)={[{0x1ff, 0x9, 0x9, 0xa1, 0x3, 0x8, 0x83, 0xfd, 0xdb, 0x2, 0x1f, 0x5, 0xffffffffffffffff}, {0x0, 0x8, 0x0, 0xba, 0xff, 0xfd, 0x9, 0x0, 0x7f, 0x81, 0x2, 0x7, 0x400}, {0x184b, 0x5, 0x8, 0x2, 0x9, 0xc1, 0x5, 0x3, 0x1, 0x6, 0x0, 0xc7, 0x9}], 0x8}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, 0xfffffffffffffffc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'sit0\x00', r3, 0x4, 0x1f, 0xe3, 0x1, 0x40, @empty, @mcast2, 0x7800, 0x700, 0xa52b, 0x80000001}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in6=@remote}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000080", @ANYRES16=0x0, @ANYBLOB="10002abd7000fbdbdf250800000005001200090000000800110001000000"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4c881) 23:20:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000080)=0x40, 0x8) 23:20:53 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$rds(0x15, 0x5, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000240)=""/68, 0x44}, &(0x7f00000002c0)}, 0x20) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000200), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r3) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x752eea37fd479d0b, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) 23:20:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000040)={r1, 0x3, 0x7, "83db99050c35ecd79e6add71da2afbba2611d122afd90d7c05b57624d6e4794e2d266830548264f8d8437f223fd84f18421854a801aac260907abd8d"}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:53 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000000), 0x4) socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) 23:20:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000080)={0x5, 0x82e, 0x8, 0x5}, 0x10) 23:20:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000040)={r1, 0x3, 0x7, "83db99050c35ecd79e6add71da2afbba2611d122afd90d7c05b57624d6e4794e2d266830548264f8d8437f223fd84f18421854a801aac260907abd8d"}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000063df3c0ab37c25fcf40fe7031862a898"], 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8890) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x154, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x131d6723}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}]}, 0x154}}, 0x40080) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_open_dev$audion(&(0x7f0000000440), 0x18000000000000, 0x200) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000082}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x9c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x13}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x259}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}]}]}, 0x9c}}, 0x48004) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6025ad511a9fe43b}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf25080000006edff1e7c41968c1a943058004003f000100050007000300"], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x4) 23:20:53 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 23:20:53 executing program 0: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x75}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4004040) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x108, r0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2d7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb6}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffe1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}]}]}, 0x108}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x60}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$isdn_base(0x22, 0x3, 0x0) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000040)={r1, 0x3, 0x7, "83db99050c35ecd79e6add71da2afbba2611d122afd90d7c05b57624d6e4794e2d266830548264f8d8437f223fd84f18421854a801aac260907abd8d"}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:53 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x334, 0xc6, 0x1, 0xf3, 0x9, @remote}, 0x10) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x1, 0x275, 0x2, 0xc]}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 23:20:53 executing program 4: socket$rds(0x15, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23:20:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) 23:20:53 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010007d84"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 23:20:53 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@tipc=@name, &(0x7f0000000340)=0x80) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'gre0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x8000, 0x7800, 0x0, 0xfff, {{0x3f, 0x4, 0x1, 0x6, 0xfc, 0x64, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010100, {[@lsrr={0x83, 0x7, 0x96, [@remote]}, @timestamp={0x44, 0x10, 0x66, 0x0, 0xd, [0xdb, 0x10000, 0x4]}, @timestamp={0x44, 0x28, 0xb9, 0x0, 0x7, [0x20c3, 0xff, 0x9, 0xfffffffc, 0x7ff, 0x8, 0xfffffc2f, 0x5, 0x0]}, @lsrr={0x83, 0x1b, 0x4e, [@broadcast, @multicast2, @private=0xa010100, @loopback, @rand_addr=0x64010101, @broadcast]}, @lsrr={0x83, 0x1b, 0x32, [@multicast2, @rand_addr=0x64010100, @multicast2, @private=0xa010100, @multicast2, @multicast1]}, @timestamp_prespec={0x44, 0x44, 0xc9, 0x3, 0x1, [{@multicast1, 0x2}, {@multicast1, 0x8}, {@rand_addr=0x64010101, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0xffffffff}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x4}, {@multicast1, 0x2}]}, @lsrr={0x83, 0x1f, 0x31, [@broadcast, @multicast1, @local, @multicast2, @broadcast, @local, @private=0xa010102]}, @timestamp={0x44, 0x10, 0xb, 0x0, 0x0, [0x3, 0x8d, 0x6]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0xfffffffffffffffe) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)) 23:20:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000100)={'veth0_to_hsr\x00', @ifru_settings={0x0, 0x0, @sync=&(0x7f00000000c0)={0x0, 0x5}}}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:53 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000100)={r0, 0x8, 0x4, "f0dd6e6f4919801e5cccc4cf41e1fe6d7ff0be7d4df198cca36b7cc66fbc0dab5112e29375a1a6436d3a6147fec4c074b77310c63cfc8ca38fff8bf2121d9829cb7c4886d974389611a386313890485acf44b3f431da6afcb7a70d44f39b8c4a7aa7f23feb30d844f3a49a43744e5dbe38efe98354dce62401a8f8062586e1156b4c8222d26cdba99f3a3db0b259f525842ee39715930a1c97f75715f362c5e943f80cbcd48c3803fb8b83a389ab1970d69fcc050dfd97744482e03a169681851333fc0294ff18fcecbd26eef7ce51866266f7c22713ba8f202feb6d7e1a1d080a18099e2c6b61a3fa0d2e4a8ce145ec677f86839988e3"}) 23:20:53 executing program 2: socket$nl_route(0x10, 0x3, 0x0) 23:20:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000100)={'veth0_to_hsr\x00', @ifru_settings={0x0, 0x0, @sync=&(0x7f00000000c0)={0x0, 0x5}}}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 23:20:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7e8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x140}, 0x1, 0x0, 0x0, 0x4044010}, 0x40) 23:20:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000100), 0x6, 0x4000) r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc04, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000140)={0x6, 0x4006}) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x3f) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r6, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r7, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) getsockopt$netlink(r7, 0x10e, 0x1, &(0x7f0000000180)=""/133, &(0x7f00000000c0)=0x85) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r8, 0x10e, 0xa, &(0x7f0000001340)=0x2000, 0x4) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYRESDEC=r6], 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) 23:20:53 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x7, 0x8000, 0x2, 0x7}, 0x10) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) [ 3267.956598] watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [syz-executor.0:30593] [ 3267.964513] Modules linked in: [ 3267.967706] irq event stamp: 15878 [ 3267.971857] hardirqs last enabled at (15877): [] kvm_wait+0x14b/0x240 [ 3267.980160] hardirqs last disabled at (15878): [] apic_timer_interrupt+0x8e/0xa0 [ 3267.990628] softirqs last enabled at (5798): [] __do_softirq+0x68b/0x9ff [ 3267.999357] softirqs last disabled at (5705): [] irq_exit+0x193/0x240 [ 3268.010641] CPU: 0 PID: 30593 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 3268.018584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3268.033385] task: ffff88805fb0c180 task.stack: ffff8882129c0000 [ 3268.039446] RIP: 0010:native_safe_halt+0xe/0x10 [ 3268.044091] RSP: 0018:ffff8882129c7b68 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff10 [ 3268.051797] RAX: 1ffffffff11e125c RBX: ffffffff89dd446c RCX: 1ffff1100bf61954 [ 3268.059137] RDX: dffffc0000000000 RSI: ffff88805fb0ca80 RDI: ffff88805fb0ca04 [ 3268.066409] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000000 [ 3268.073682] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000286 [ 3268.081367] R13: dffffc0000000000 R14: ffffffff89dd446d R15: ffffed10174855d8 [ 3268.089486] FS: 00000000019c5400(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 3268.097691] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3268.103648] CR2: 000000000052fe70 CR3: 00000000a6386000 CR4: 00000000001426f0 [ 3268.110900] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3268.118239] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3268.125514] Call Trace: [ 3268.128091] kvm_wait+0x179/0x240 [ 3268.131614] __pv_queued_spin_lock_slowpath+0x722/0x910 [ 3268.136957] ? hci_send_to_channel+0x3c/0x200 [ 3268.141430] queued_read_lock_slowpath+0x150/0x190 [ 3268.146336] hci_send_to_channel+0x3c/0x200 [ 3268.150638] hci_send_monitor_ctrl_event+0x3dd/0x500 [ 3268.155723] mgmt_send_event+0x2b3/0x330 [ 3268.159766] mgmt_index_added+0x1d5/0x210 [ 3268.163894] ? mgmt_stop_discovery_complete+0x120/0x120 [ 3268.169239] hci_sock_release+0x3d7/0x4c0 [ 3268.173411] __sock_release+0xcd/0x2b0 [ 3268.177291] ? __sock_release+0x2b0/0x2b0 [ 3268.181441] sock_close+0x15/0x20 [ 3268.184888] __fput+0x25f/0x7a0 [ 3268.188155] task_work_run+0x11f/0x190 [ 3268.192026] exit_to_usermode_loop+0x1ad/0x200 [ 3268.196591] do_syscall_64+0x4a3/0x640 [ 3268.200466] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3268.205635] RIP: 0033:0x41940b [ 3268.208804] RSP: 002b:00007ffd32a59900 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 3268.216509] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 000000000041940b [ 3268.223763] RDX: 0000000000571f78 RSI: 00000000089075c3 RDI: 0000000000000004 [ 3268.231015] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b2d423b88 [ 3268.238378] R10: 00007ffd32a599f0 R11: 0000000000000293 R12: 0000000000317cbd [ 3268.245640] R13: 00000000000003e8 R14: 000000000056bf60 R15: 0000000000317cb3 [ 3268.253004] Code: 16 5c fa e9 4f ff ff ff 48 89 ef e8 cd 16 5c fa eb 93 90 90 90 90 90 90 90 90 90 90 90 e9 07 00 00 00 0f 00 2d 34 d0 64 00 fb f4 90 e9 07 00 00 00 0f 00 2d 24 d0 64 00 f4 c3 90 90 41 55 41 [ 3268.272672] Sending NMI from CPU 0 to CPUs 1: [ 3268.277556] NMI backtrace for cpu 1 [ 3268.277560] CPU: 1 PID: 30597 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 3268.277564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3268.277567] task: ffff8882224681c0 task.stack: ffff888215e60000 [ 3268.277570] RIP: 0010:queued_write_lock_slowpath+0xcb/0x1d0 [ 3268.277572] RSP: 0018:ffff888215e67d38 EFLAGS: 00000206 [ 3268.277577] RAX: 0000000000000101 RBX: ffffffff89dd4468 RCX: 0000000000000fd5 [ 3268.277580] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff89dd4468 [ 3268.277583] RBP: ffffffff89dd446c R08: ffffffff8b997968 R09: 0000000000040597 [ 3268.277586] R10: ffff888222468a70 R11: ffff8882224681c0 R12: 0000000000000003 [ 3268.277589] R13: fffffbfff13ba88d R14: 00000000000000ff R15: ffffffff8863a360 [ 3268.277592] FS: 00007febf9a6b700(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 [ 3268.277595] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3268.277598] CR2: 000000000056c000 CR3: 00000000738fd000 CR4: 00000000001426e0 [ 3268.277601] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3268.277604] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3268.277606] Call Trace: [ 3268.277608] do_raw_write_lock+0xc2/0x1d0 [ 3268.277610] bt_sock_link+0x1f/0x120 [ 3268.277612] hci_sock_create+0x15c/0x1d0 [ 3268.277614] bt_sock_create+0x13b/0x280 [ 3268.277616] __sock_create+0x303/0x620 [ 3268.277617] SyS_socket+0xd1/0x1b0 [ 3268.277620] ? move_addr_to_kernel+0x60/0x60 [ 3268.277621] ? fput+0xb/0x140 [ 3268.277623] ? do_syscall_64+0x4c/0x640 [ 3268.277626] ? move_addr_to_kernel+0x60/0x60 [ 3268.277628] do_syscall_64+0x1d5/0x640 [ 3268.277630] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3268.277632] RIP: 0033:0x4665f9 [ 3268.277634] RSP: 002b:00007febf9a6b128 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3268.277640] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 3268.277643] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001f [ 3268.277646] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 3268.277649] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3268.277652] R13: 00007ffec0ca292f R14: 00007febf9a6b300 R15: 0000000000022000 [ 3268.277653] Code: 75 dc 49 89 dd 49 89 dc 41 be ff 00 00 00 49 c1 ed 03 41 83 e4 07 48 b8 00 00 00 00 00 fc ff df 49 01 c5 41 83 c4 03 eb 02 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 9e 00 00 00 8b 03 83 [ 3268.278162] Kernel panic - not syncing: softlockup: hung tasks [ 3268.515888] CPU: 0 PID: 30593 Comm: syz-executor.0 Tainted: G L 4.14.232-syzkaller #0 [ 3268.524960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3268.534290] Call Trace: [ 3268.536870] [ 3268.539005] dump_stack+0x1b2/0x281 [ 3268.542614] panic+0x1f9/0x42d [ 3268.545794] ? add_taint.cold+0x16/0x16 [ 3268.549759] ? printk_safe_flush+0xa9/0x110 [ 3268.554062] watchdog_timer_fn.cold+0x16/0x25 [ 3268.558539] __hrtimer_run_queues+0x30b/0xc80 [ 3268.563016] ? watchdog+0x50/0x50 [ 3268.566450] ? retrigger_next_event+0x310/0x310 [ 3268.571182] ? ktime_get_update_offsets_now+0x272/0x3f0 [ 3268.576527] hrtimer_interrupt+0x1e6/0x5e0 [ 3268.580759] smp_apic_timer_interrupt+0x117/0x5e0 [ 3268.585580] apic_timer_interrupt+0x93/0xa0 [ 3268.589876] [ 3268.592092] RIP: 0010:native_safe_halt+0xe/0x10 [ 3268.596738] RSP: 0018:ffff8882129c7b68 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff10 [ 3268.604423] RAX: 1ffffffff11e125c RBX: ffffffff89dd446c RCX: 1ffff1100bf61954 [ 3268.611930] RDX: dffffc0000000000 RSI: ffff88805fb0ca80 RDI: ffff88805fb0ca04 [ 3268.619186] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000000 [ 3268.626782] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000286 [ 3268.634040] R13: dffffc0000000000 R14: ffffffff89dd446d R15: ffffed10174855d8 [ 3268.641301] kvm_wait+0x179/0x240 [ 3268.645170] __pv_queued_spin_lock_slowpath+0x722/0x910 [ 3268.650515] ? hci_send_to_channel+0x3c/0x200 [ 3268.654989] queued_read_lock_slowpath+0x150/0x190 [ 3268.659899] hci_send_to_channel+0x3c/0x200 [ 3268.664203] hci_send_monitor_ctrl_event+0x3dd/0x500 [ 3268.669290] mgmt_send_event+0x2b3/0x330 [ 3268.673333] mgmt_index_added+0x1d5/0x210 [ 3268.677461] ? mgmt_stop_discovery_complete+0x120/0x120 [ 3268.682804] hci_sock_release+0x3d7/0x4c0 [ 3268.686933] __sock_release+0xcd/0x2b0 [ 3268.690798] ? __sock_release+0x2b0/0x2b0 [ 3268.694923] sock_close+0x15/0x20 [ 3268.698369] __fput+0x25f/0x7a0 [ 3268.701654] task_work_run+0x11f/0x190 [ 3268.705522] exit_to_usermode_loop+0x1ad/0x200 [ 3268.710082] do_syscall_64+0x4a3/0x640 [ 3268.713954] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3268.719125] RIP: 0033:0x41940b [ 3268.722316] RSP: 002b:00007ffd32a59900 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 3268.730004] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 000000000041940b [ 3268.737344] RDX: 0000000000571f78 RSI: 00000000089075c3 RDI: 0000000000000004 [ 3268.744590] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b2d423b88 [ 3268.751838] R10: 00007ffd32a599f0 R11: 0000000000000293 R12: 0000000000317cbd [ 3268.759107] R13: 00000000000003e8 R14: 000000000056bf60 R15: 0000000000317cb3 [ 3268.767559] Kernel Offset: disabled [ 3268.771456] Rebooting in 86400 seconds..