4cbba3be0c48af3aeab454c47eba547c8e74a778834efa0e4e8afb070219d0b93f1957dea3b7b09496fda8e1146f6ce491e92c9fbdbe3aeb3f2d6ecfbc00411a98"}]}, 0x160}, 0x1, 0x0, 0x0, 0x20040040}, 0x40000) 05:58:00 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x80480, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 05:58:00 executing program 5: r0 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) r2 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r2) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}]}, 0x40}}, 0x4008800) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:00 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000001540), &(0x7f0000001580)=0x4) r1 = getpgrp(0xffffffffffffffff) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x90000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0, {0x10}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x1f}, &(0x7f0000000140)=""/101, 0x65, &(0x7f00000001c0)=""/108, &(0x7f0000001480)=[r1, r2, r3, 0x0, 0xffffffffffffffff], 0x5, {r4}}, 0x58) 05:58:00 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4}, 0xc) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r4}}, 0x18) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4}, 0xc) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r4}}, 0x18) (async) 05:58:00 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)={0x108, r0, 0x407, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0xcd, 0xc5, "ac0dd5941bf405cff02d8158203d48f31265f3f21bb1ef5c0e7811c8ea0a419f26f9e86069246aefef89cf475482d976ff9697f80959ee4e6a54cfcdb01f7caf4e5f560779f15f94cd631c46d83037680e73723e29c822d5045175b571517866f586b673a52c6d26dc02f6021c48fa27676b70b927d75366919c238314dca1c3c2c61eb75076bd9a1de4ff7ab8f8316215d57f151178679ac13d44de0b6cd351cf5bd094b5bf635c9dc31eb504f28a30300f35ad0cd6208a23ba597472da71de0699f00f1810940005"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x108}, 0x1, 0x0, 0x0, 0x20040040}, 0x40000) 05:58:00 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x80480, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 05:58:00 executing program 5: r0 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) r2 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r2) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}]}, 0x40}}, 0x4008800) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:00 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)={0x100, r0, 0x407, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0xcd, 0xc5, "ac0dd5941bf405cff02d8158203d48f31265f3f21bb1ef5c0e7811c8ea0a419f26f9e86069246aefef89cf475482d976ff9697f80959ee4e6a54cfcdb01f7caf4e5f560779f15f94cd631c46d83037680e73723e29c822d5045175b571517866f586b673a52c6d26dc02f6021c48fa27676b70b927d75366919c238314dca1c3c2c61eb75076bd9a1de4ff7ab8f8316215d57f151178679ac13d44de0b6cd351cf5bd094b5bf635c9dc31eb504f28a30300f35ad0cd6208a23ba597472da71de0699f00f1810940005"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}]}, 0x100}, 0x1, 0x0, 0x0, 0x20040040}, 0x40000) 05:58:00 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x80480, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x80480, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) (async) 05:58:00 executing program 4: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000001540), &(0x7f0000001580)=0x4) r1 = getpgrp(0xffffffffffffffff) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x90000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0, {0x10}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) syz_clone3(&(0x7f00000014c0)={0x380000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x1f}, &(0x7f0000000140)=""/101, 0x65, &(0x7f00000001c0)=""/108, &(0x7f0000001480)=[r1, r2, r3, 0x0, 0xffffffffffffffff], 0x5}, 0x58) 05:58:00 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = socket(0x6, 0xa, 0xfffffffa) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x73}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x63f}]}, 0x30}, 0x1, 0x0, 0x0, 0x40094}, 0x400c010) 05:58:00 executing program 5: r0 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) (async) r2 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r2) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}]}, 0x40}}, 0x4008800) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:00 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)={0xf8, r0, 0x407, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0xcd, 0xc5, "ac0dd5941bf405cff02d8158203d48f31265f3f21bb1ef5c0e7811c8ea0a419f26f9e86069246aefef89cf475482d976ff9697f80959ee4e6a54cfcdb01f7caf4e5f560779f15f94cd631c46d83037680e73723e29c822d5045175b571517866f586b673a52c6d26dc02f6021c48fa27676b70b927d75366919c238314dca1c3c2c61eb75076bd9a1de4ff7ab8f8316215d57f151178679ac13d44de0b6cd351cf5bd094b5bf635c9dc31eb504f28a30300f35ad0cd6208a23ba597472da71de0699f00f1810940005"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20040040}, 0x40000) 05:58:00 executing program 4: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000001540), &(0x7f0000001580)=0x4) r1 = getpgrp(0xffffffffffffffff) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x1f}, &(0x7f0000000140)=""/101, 0x65, &(0x7f00000001c0)=""/108, &(0x7f0000001480)=[r1, r2, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r3}}, 0x58) 05:58:00 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000001540), &(0x7f0000001580)=0x4) r1 = getpgrp(0xffffffffffffffff) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x90000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0, {0x10}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x1f}, &(0x7f0000000140)=""/101, 0x65, &(0x7f00000001c0)=""/108, &(0x7f0000001480)=[r1, r2, r3, 0x0, 0xffffffffffffffff], 0x5, {r4}}, 0x58) 05:58:00 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000080)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x2b, "e3b83f", "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"}}, 0x110) 05:58:00 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000121ec7c64107cac6dbf0fb905001d88aed1220a5c5b2185d5c9027c74fd16996b9d95aeaa8ae9ad7af90ffa6da5828028694705cab1fcc1bcc27208be330a08de824b70566ed011c80ceb", @ANYRES32=0x0, @ANYBLOB="0400"/12], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r3, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0xe}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0x20, 0x34, @random="ed23ea421f42ec278787a36c6ff5d1f2c176c05f893cbdd76e5d91ef"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x39}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x810) r5 = pidfd_getfd(r0, r1, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x408, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8001) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6000000, 0x10, r0, 0x4b) 05:58:00 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)={0x28, r0, 0x407, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20040040}, 0x40000) 05:58:00 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) r0 = socket(0x6, 0xa, 0xfffffffa) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x73}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x63f}]}, 0x30}, 0x1, 0x0, 0x0, 0x40094}, 0x400c010) 05:58:00 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000121ec7c64107cac6dbf0fb905001d88aed1220a5c5b2185d5c9027c74fd16996b9d95aeaa8ae9ad7af90ffa6da5828028694705cab1fcc1bcc27208be330a08de824b70566ed011c80ceb", @ANYRES32=0x0, @ANYBLOB="0400"/12], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r3, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0xe}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0x20, 0x34, @random="ed23ea421f42ec278787a36c6ff5d1f2c176c05f893cbdd76e5d91ef"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x39}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x810) (async) r5 = pidfd_getfd(r0, r1, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x408, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8001) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6000000, 0x10, r0, 0x4b) 05:58:00 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)={0x28, r0, 0x407, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x40000) 05:58:00 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000080)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x2b, "e3b83f", "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"}}, 0x110) 05:58:00 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000121ec7c64107cac6dbf0fb905001d88aed1220a5c5b2185d5c9027c74fd16996b9d95aeaa8ae9ad7af90ffa6da5828028694705cab1fcc1bcc27208be330a08de824b70566ed011c80ceb", @ANYRES32=0x0, @ANYBLOB="0400"/12], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r3, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0xe}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0x20, 0x34, @random="ed23ea421f42ec278787a36c6ff5d1f2c176c05f893cbdd76e5d91ef"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x39}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x810) r5 = pidfd_getfd(r0, r1, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x408, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8001) (async, rerun: 64) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6000000, 0x10, r0, 0x4b) (rerun: 64) 05:58:00 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = socket(0x6, 0xa, 0xfffffffa) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x73}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x63f}]}, 0x30}, 0x1, 0x0, 0x0, 0x40094}, 0x400c010) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) socket(0x6, 0xa, 0xfffffffa) (async) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x73}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x63f}]}, 0x30}, 0x1, 0x0, 0x0, 0x40094}, 0x400c010) (async) 05:58:00 executing program 4: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000001540), &(0x7f0000001580)=0x4) r1 = getpgrp(0xffffffffffffffff) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x1f}, &(0x7f0000000140)=""/101, 0x65, &(0x7f00000001c0)=""/108, &(0x7f0000001480)=[r1, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r2}}, 0x58) 05:58:01 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000080)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x2b, "e3b83f", "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"}}, 0x110) 05:58:01 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)={0x28, r0, 0x407, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 05:58:01 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r3, r4}}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x1b) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r5, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4004000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x100, r5, 0x410, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x70}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_DATA={0xca, 0xc5, "65fd11e154dc1db1645445aa1a7909d6b60ca8252327aff3e2ad67c6bb3462b339660fc39267851b99a927aa51c1ee351d3beb54079b9ad8f9768e1378711049b506ebce4dbe4f40ae4bbbf959e8bfe3a6aef5c4ac78f170f7d461bf4b15394c6aab21901b6d180ae4b2b5244a6eb142f3fecc56b34fb625be3179acda9a683cb97dc32e6fe9a559e59ac4c7a58e4275d61c2cedc96a02fdf686b0495c97bc9b5e2eb1a8ba42adf5148dd2b8b3398459f0bf8cbfc056781edca96e8d632e4292d15e527c9157"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x753}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80}]}, 0x100}, 0x1, 0x0, 0x0, 0x20048001}, 0x1) 05:58:01 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000001540), &(0x7f0000001580)=0x4) r1 = getpgrp(0xffffffffffffffff) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) getpgrp(0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x90000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x10}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) 05:58:01 executing program 4: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000001540), &(0x7f0000001580)=0x4) r1 = getpgrp(0xffffffffffffffff) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x1f}, &(0x7f0000000140)=""/101, 0x65, &(0x7f00000001c0)=""/108, &(0x7f0000001480)=[r1, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r2}}, 0x58) 05:58:01 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x304c2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4d}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r3, 0xa287371d538b72f6}}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {r6, 0x20, "03a118", "f8aee91445f92d2a3fffaf1c3ac6231a27664d7a97693974cd978c79bd7e2cd707682628996109746dc76cdb267d8c65954964f68f0ae2d408308b598b64ddcfceebf2b72aa3f2e2e1d7aa23347dc29215fc132f7bd71a5876c8f873b5356f8c7df2d6565bab9d1ff4f16aae629a93d48d6a4ea6a281f8844c07aa56006352b27bb1cf6282cc683dda829de8ec459b6b1856a6f5e398b1106bcc387845fc9676a618e8133795770aad0050b66013756b3e8e00e42944798108d7321fe5b87bfc9a73a5521d412b73f15ad3984de7d5dddc9a82af0d4300e4d5be2ffdc4a49e6cf81306e7fad69c20b7f446b8d7753f388c23f774c0312c48da689eede2f7cb16"}}, 0x110) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r9, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r10}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r7, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r10, 0x91, '\x00', "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"}}, 0x110) 05:58:01 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r1, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x78}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x79}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000000000000005300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099090000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x26000410}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, r3, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0xde, 0x3}, {0xc6, 0x3}, {0xfb}, {0x1}, {0x7, 0x5}, {0x4, 0x4}, {0x1, 0x3}], "fabe5f03d3b1a97c"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x89, 0x1}, {0x96, 0x4}], "af4bddf4a6d8e86d"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x4}, {0x7, 0x1}, {0x1, 0x7}, {0xff, 0x7}, {0x68, 0x4}, {0x4}, {0xf9, 0x4}, {0x7}, {0x8, 0x2}, {0x81, 0x4}, {0x3f, 0x3}], "aae3463eda342430"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x55, 0x2}, {0x4, 0x3}, {0x8, 0x3}, {0x11, 0x3}, {0x5}, {0x5, 0x2}, {0xa3}, {0x32, 0x5}, {0x4, 0x7}, {0x7f, 0x4}, {0xbc, 0x4}, {0x8, 0x7}, {0xd9, 0x3}, {0x0, 0x3}, {0xff, 0x5}, {0x9, 0x5}, {0x2, 0x6}, {0xff}, {0x80, 0x2}, {0x1}, {0x7, 0x4}], "6228f83a91ae1a61"}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) 05:58:01 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r3, r4}}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x1b) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r5, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4004000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x100, r5, 0x410, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x70}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_DATA={0xca, 0xc5, "65fd11e154dc1db1645445aa1a7909d6b60ca8252327aff3e2ad67c6bb3462b339660fc39267851b99a927aa51c1ee351d3beb54079b9ad8f9768e1378711049b506ebce4dbe4f40ae4bbbf959e8bfe3a6aef5c4ac78f170f7d461bf4b15394c6aab21901b6d180ae4b2b5244a6eb142f3fecc56b34fb625be3179acda9a683cb97dc32e6fe9a559e59ac4c7a58e4275d61c2cedc96a02fdf686b0495c97bc9b5e2eb1a8ba42adf5148dd2b8b3398459f0bf8cbfc056781edca96e8d632e4292d15e527c9157"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x753}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80}]}, 0x100}, 0x1, 0x0, 0x0, 0x20048001}, 0x1) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r3, r4}}, 0x18) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x1b) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r5, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4004000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x100, r5, 0x410, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x70}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_DATA={0xca, 0xc5, "65fd11e154dc1db1645445aa1a7909d6b60ca8252327aff3e2ad67c6bb3462b339660fc39267851b99a927aa51c1ee351d3beb54079b9ad8f9768e1378711049b506ebce4dbe4f40ae4bbbf959e8bfe3a6aef5c4ac78f170f7d461bf4b15394c6aab21901b6d180ae4b2b5244a6eb142f3fecc56b34fb625be3179acda9a683cb97dc32e6fe9a559e59ac4c7a58e4275d61c2cedc96a02fdf686b0495c97bc9b5e2eb1a8ba42adf5148dd2b8b3398459f0bf8cbfc056781edca96e8d632e4292d15e527c9157"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x753}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80}]}, 0x100}, 0x1, 0x0, 0x0, 0x20048001}, 0x1) (async) 05:58:01 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x409, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40048}, 0x8060) 05:58:01 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000001540), &(0x7f0000001580)=0x4) r1 = getpgrp(0xffffffffffffffff) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) getpgrp(0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x90000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x10}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 05:58:01 executing program 4: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000001540), &(0x7f0000001580)=0x4) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x1f}, &(0x7f0000000140)=""/101, 0x65, &(0x7f00000001c0)=""/108, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r1}}, 0x58) 05:58:01 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x304c2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4d}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r3, 0xa287371d538b72f6}}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {r6, 0x20, "03a118", "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"}}, 0x110) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r9, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r10}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r7, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r10, 0x91, '\x00', "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"}}, 0x110) 05:58:01 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async, rerun: 64) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r3, r4}}, 0x18) (rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) (async) r6 = socket$netlink(0x10, 0x3, 0x1b) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r5, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4004000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x100, r5, 0x410, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x70}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_DATA={0xca, 0xc5, "65fd11e154dc1db1645445aa1a7909d6b60ca8252327aff3e2ad67c6bb3462b339660fc39267851b99a927aa51c1ee351d3beb54079b9ad8f9768e1378711049b506ebce4dbe4f40ae4bbbf959e8bfe3a6aef5c4ac78f170f7d461bf4b15394c6aab21901b6d180ae4b2b5244a6eb142f3fecc56b34fb625be3179acda9a683cb97dc32e6fe9a559e59ac4c7a58e4275d61c2cedc96a02fdf686b0495c97bc9b5e2eb1a8ba42adf5148dd2b8b3398459f0bf8cbfc056781edca96e8d632e4292d15e527c9157"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x753}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80}]}, 0x100}, 0x1, 0x0, 0x0, 0x20048001}, 0x1) 05:58:01 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x409, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40048}, 0x8060) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x409, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40048}, 0x8060) (async) 05:58:01 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r1, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x78}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x79}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r2) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000000000000005300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099090000000000000000"], 0x28}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x26000410}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, r3, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0xde, 0x3}, {0xc6, 0x3}, {0xfb}, {0x1}, {0x7, 0x5}, {0x4, 0x4}, {0x1, 0x3}], "fabe5f03d3b1a97c"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x89, 0x1}, {0x96, 0x4}], "af4bddf4a6d8e86d"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x4}, {0x7, 0x1}, {0x1, 0x7}, {0xff, 0x7}, {0x68, 0x4}, {0x4}, {0xf9, 0x4}, {0x7}, {0x8, 0x2}, {0x81, 0x4}, {0x3f, 0x3}], "aae3463eda342430"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x55, 0x2}, {0x4, 0x3}, {0x8, 0x3}, {0x11, 0x3}, {0x5}, {0x5, 0x2}, {0xa3}, {0x32, 0x5}, {0x4, 0x7}, {0x7f, 0x4}, {0xbc, 0x4}, {0x8, 0x7}, {0xd9, 0x3}, {0x0, 0x3}, {0xff, 0x5}, {0x9, 0x5}, {0x2, 0x6}, {0xff}, {0x80, 0x2}, {0x1}, {0x7, 0x4}], "6228f83a91ae1a61"}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) (rerun: 32) 05:58:01 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x304c2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4d}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r3, 0xa287371d538b72f6}}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {r6, 0x20, "03a118", "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"}}, 0x110) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r9, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r10}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r7, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r10, 0x91, '\x00', "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"}}, 0x110) 05:58:01 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r1, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x78}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x79}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r2) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000000000000005300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099090000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x26000410}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, r3, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0xde, 0x3}, {0xc6, 0x3}, {0xfb}, {0x1}, {0x7, 0x5}, {0x4, 0x4}, {0x1, 0x3}], "fabe5f03d3b1a97c"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x89, 0x1}, {0x96, 0x4}], "af4bddf4a6d8e86d"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x4}, {0x7, 0x1}, {0x1, 0x7}, {0xff, 0x7}, {0x68, 0x4}, {0x4}, {0xf9, 0x4}, {0x7}, {0x8, 0x2}, {0x81, 0x4}, {0x3f, 0x3}], "aae3463eda342430"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x55, 0x2}, {0x4, 0x3}, {0x8, 0x3}, {0x11, 0x3}, {0x5}, {0x5, 0x2}, {0xa3}, {0x32, 0x5}, {0x4, 0x7}, {0x7f, 0x4}, {0xbc, 0x4}, {0x8, 0x7}, {0xd9, 0x3}, {0x0, 0x3}, {0xff, 0x5}, {0x9, 0x5}, {0x2, 0x6}, {0xff}, {0x80, 0x2}, {0x1}, {0x7, 0x4}], "6228f83a91ae1a61"}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) 05:58:01 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000001540), &(0x7f0000001580)=0x4) r1 = getpgrp(0xffffffffffffffff) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) getpgrp(0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x90000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x10}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) 05:58:01 executing program 4: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x1f}, &(0x7f0000000140)=""/101, 0x65, &(0x7f00000001c0)=""/108, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r1}}, 0x58) 05:58:01 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x304c2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4d}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r3, 0xa287371d538b72f6}}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {r6, 0x20, "03a118", "f8aee91445f92d2a3fffaf1c3ac6231a27664d7a97693974cd978c79bd7e2cd707682628996109746dc76cdb267d8c65954964f68f0ae2d408308b598b64ddcfceebf2b72aa3f2e2e1d7aa23347dc29215fc132f7bd71a5876c8f873b5356f8c7df2d6565bab9d1ff4f16aae629a93d48d6a4ea6a281f8844c07aa56006352b27bb1cf6282cc683dda829de8ec459b6b1856a6f5e398b1106bcc387845fc9676a618e8133795770aad0050b66013756b3e8e00e42944798108d7321fe5b87bfc9a73a5521d412b73f15ad3984de7d5dddc9a82af0d4300e4d5be2ffdc4a49e6cf81306e7fad69c20b7f446b8d7753f388c23f774c0312c48da689eede2f7cb16"}}, 0x110) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r7, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r9, 0x91, '\x00', "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"}}, 0x110) 05:58:01 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r6, 0x8}}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100)={0x62}, 0x1) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:01 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x409, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40048}, 0x8060) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x409, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40048}, 0x8060) (async) 05:58:01 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x185740) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000), 0x4) 05:58:01 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 05:58:01 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x304c2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4d}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r3, 0xa287371d538b72f6}}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {r6, 0x20, "03a118", "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"}}, 0x110) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r7, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x91, '\x00', "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"}}, 0x110) 05:58:01 executing program 4: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x1a, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x1f}, &(0x7f0000000140)=""/101, 0x65, &(0x7f00000001c0)=""/108, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r0}}, 0x58) 05:58:01 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000001540), &(0x7f0000001580)=0x4) r1 = getpgrp(0xffffffffffffffff) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) syz_clone3(&(0x7f0000001400)={0x90000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x10}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) 05:58:01 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 05:58:01 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x304c2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4d}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r3, 0xa287371d538b72f6}}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {r6, 0x20, "03a118", "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"}}, 0x110) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r7, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x91, '\x00', "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"}}, 0x110) 05:58:01 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x185740) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000), 0x4) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x185740) (async) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000), 0x4) (async) 05:58:01 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 05:58:01 executing program 4: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x1f}, &(0x7f0000000140)=""/101, 0x65, &(0x7f00000001c0)=""/108, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r0}}, 0x58) 05:58:01 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r6, 0x8}}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100)={0x62}, 0x1) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) (async) socket(0x0, 0x0, 0x6) (async) socket(0x27, 0x6, 0x800) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) (async) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r6, 0x8}}, 0x10) (async) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100)={0x62}, 0x1) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) (async) 05:58:01 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x304c2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4d}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r3, 0xa287371d538b72f6}}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {r6, 0x20, "03a118", "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"}}, 0x110) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r7, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x91, '\x00', "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"}}, 0x110) 05:58:01 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000001540), &(0x7f0000001580)=0x4) getpgrp(0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x90000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x10}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) 05:58:01 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x4000010, r0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x1000)=nil, 0x1000) 05:58:01 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x1f}, &(0x7f0000000140)=""/101, 0x65, &(0x7f00000001c0)=""/108, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r0}}, 0x58) 05:58:01 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x185740) (async) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000), 0x4) 05:58:01 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x304c2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4d}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r3, 0xa287371d538b72f6}}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {r6, 0x20, "03a118", "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"}}, 0x110) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r7, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r9, 0x91, '\x00', "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"}}, 0x110) 05:58:01 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x4000010, r0, 0x0) (async) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x1000)=nil, 0x1000) 05:58:01 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x3f, 0x24c741) 05:58:01 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x1f}, &(0x7f0000000140)=""/101, 0x65, &(0x7f00000001c0)=""/108, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r0}}, 0x58) 05:58:01 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000001540), &(0x7f0000001580)=0x4) syz_clone3(&(0x7f0000001400)={0x90000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x10}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) 05:58:01 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x304c2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4d}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r3, 0xa287371d538b72f6}}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {r6, 0x20, "03a118", "f8aee91445f92d2a3fffaf1c3ac6231a27664d7a97693974cd978c79bd7e2cd707682628996109746dc76cdb267d8c65954964f68f0ae2d408308b598b64ddcfceebf2b72aa3f2e2e1d7aa23347dc29215fc132f7bd71a5876c8f873b5356f8c7df2d6565bab9d1ff4f16aae629a93d48d6a4ea6a281f8844c07aa56006352b27bb1cf6282cc683dda829de8ec459b6b1856a6f5e398b1106bcc387845fc9676a618e8133795770aad0050b66013756b3e8e00e42944798108d7321fe5b87bfc9a73a5521d412b73f15ad3984de7d5dddc9a82af0d4300e4d5be2ffdc4a49e6cf81306e7fad69c20b7f446b8d7753f388c23f774c0312c48da689eede2f7cb16"}}, 0x110) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r7, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r8, 0x91, '\x00', "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"}}, 0x110) 05:58:01 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r6, 0x8}}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100)={0x62}, 0x1) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) (async) socket(0x0, 0x0, 0x6) (async) socket(0x27, 0x6, 0x800) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) (async) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r6, 0x8}}, 0x10) (async) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100)={0x62}, 0x1) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) (async) 05:58:01 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x3f, 0x24c741) 05:58:01 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x4000010, r0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x1000)=nil, 0x1000) 05:58:01 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x1f}, &(0x7f0000000140)=""/101, 0x65, &(0x7f00000001c0)=""/108, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r0}}, 0x58) 05:58:01 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) syz_clone3(&(0x7f0000001400)={0x90000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x10}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) 05:58:01 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x304c2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4d}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r3, 0xa287371d538b72f6}}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {r6, 0x20, "03a118", "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"}}, 0x110) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r7, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r8, 0x91, '\x00', "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"}}, 0x110) 05:58:01 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x1f}, &(0x7f0000000140)=""/101, 0x65, &(0x7f00000001c0)=""/108, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r0}}, 0x58) 05:58:01 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x3f, 0x24c741) syz_open_dev$vcsn(&(0x7f0000000000), 0x3f, 0x24c741) (async) 05:58:01 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x304c2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4d}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r3, 0xa287371d538b72f6}}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {r6, 0x20, "03a118", "f8aee91445f92d2a3fffaf1c3ac6231a27664d7a97693974cd978c79bd7e2cd707682628996109746dc76cdb267d8c65954964f68f0ae2d408308b598b64ddcfceebf2b72aa3f2e2e1d7aa23347dc29215fc132f7bd71a5876c8f873b5356f8c7df2d6565bab9d1ff4f16aae629a93d48d6a4ea6a281f8844c07aa56006352b27bb1cf6282cc683dda829de8ec459b6b1856a6f5e398b1106bcc387845fc9676a618e8133795770aad0050b66013756b3e8e00e42944798108d7321fe5b87bfc9a73a5521d412b73f15ad3984de7d5dddc9a82af0d4300e4d5be2ffdc4a49e6cf81306e7fad69c20b7f446b8d7753f388c23f774c0312c48da689eede2f7cb16"}}, 0x110) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r7, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r8, 0x91, '\x00', "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"}}, 0x110) 05:58:01 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 05:58:01 executing program 3: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x608, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hald_var_run_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x880) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'caif0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:ptchown_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:hald_cache_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0xd4}}, 0x400c0a0) 05:58:01 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x1a, 0x0, 0x0) syz_clone3(&(0x7f0000001400)={0x90000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x10}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) 05:58:01 executing program 5: sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x40001) r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0xb, 0x0, 0x19}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000340)="b5e192368e9b95ceb7fb8c1d79f0be5e7193629653af6fb709507be5d7239522cfaaa3b74099be6cc6e86f73f88977193654b47566ee55780228dbef16a43c715d34c3dd194d96dda6117addb1b34e305227cde22ba31ebcca61ce52c0f0a527597614ee96dfa9fa934291d9d1ffa0e3b533b31eb8637d75fa557d6cb34406fa436713a24557", 0x86}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:01 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 05:58:01 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x304c2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4d}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r3, 0xa287371d538b72f6}}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {r6, 0x20, "03a118", "f8aee91445f92d2a3fffaf1c3ac6231a27664d7a97693974cd978c79bd7e2cd707682628996109746dc76cdb267d8c65954964f68f0ae2d408308b598b64ddcfceebf2b72aa3f2e2e1d7aa23347dc29215fc132f7bd71a5876c8f873b5356f8c7df2d6565bab9d1ff4f16aae629a93d48d6a4ea6a281f8844c07aa56006352b27bb1cf6282cc683dda829de8ec459b6b1856a6f5e398b1106bcc387845fc9676a618e8133795770aad0050b66013756b3e8e00e42944798108d7321fe5b87bfc9a73a5521d412b73f15ad3984de7d5dddc9a82af0d4300e4d5be2ffdc4a49e6cf81306e7fad69c20b7f446b8d7753f388c23f774c0312c48da689eede2f7cb16"}}, 0x110) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r7, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r9, 0x91, '\x00', "d3186dc3d7d35f287948b3b394c23ed05d4048b9c13390b5a11043ccf80e14e06c835cea548ee7711b7c3fe4380050a3672e03cc227af44f7e409f2f7d43af68776126815dc2af6e5e1799cccb80864d85bac2444bf5f65691a44e6a2a6835f4069ca763f48695ded1dbb753e7fa0c53041faaba92d0e0f5de520a33ab515602ed850acbf6b7488c20d7f29ef6b7feb979770d007346bf6b3bebe5a030a1aaef1620a5f8aa97d48b69d4ae0425f65a0d415fb87dab38e796cd63b5a5c8c610942282008b7d10c4d7757e87f7458731b43cbc89bdd4cfcab5207c9b6c39198cf826e124dde05ddca02e0cddb5d11181f6e43e8908bfd430d035d32a4a7e63fbe6"}}, 0x110) 05:58:01 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(0x0, 0x0) 05:58:01 executing program 3: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x608, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hald_var_run_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x880) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001cc0), r0) (async) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'caif0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:ptchown_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:hald_cache_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0xd4}}, 0x400c0a0) 05:58:01 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x1a, 0x0, 0x0) syz_clone3(&(0x7f0000001400)={0x90000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x10}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) 05:58:01 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x304c2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4d}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r3, 0xa287371d538b72f6}}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {r6, 0x20, "03a118", "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"}}, 0x110) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r8, 0x91, '\x00', "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"}}, 0x110) 05:58:01 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(0x0, 0x0) 05:58:01 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 05:58:01 executing program 3: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x608, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hald_var_run_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x880) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001cc0), r0) (async) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'caif0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:ptchown_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:hald_cache_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0xd4}}, 0x400c0a0) 05:58:01 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x1a, 0x0, 0x0) syz_clone3(&(0x7f0000001400)={0x90000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x10}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) 05:58:01 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x304c2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4d}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r3, 0xa287371d538b72f6}}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {r6, 0x20, "03a118", "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"}}, 0x110) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r8, 0x91, '\x00', "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"}}, 0x110) 05:58:01 executing program 5: sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x40001) r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0xb, 0x0, 0x19}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000340)="b5e192368e9b95ceb7fb8c1d79f0be5e7193629653af6fb709507be5d7239522cfaaa3b74099be6cc6e86f73f88977193654b47566ee55780228dbef16a43c715d34c3dd194d96dda6117addb1b34e305227cde22ba31ebcca61ce52c0f0a527597614ee96dfa9fa934291d9d1ffa0e3b533b31eb8637d75fa557d6cb34406fa436713a24557", 0x86}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000ffdbdf2501000000000000000241000064703a73797a3200000000bf313247d43e08ab272c25929bb13a7891abb444c5302a29f8f384b36321f078ded750e2952d0999df6985a76853bada9e7f17bb9669b7e7404e30ce76334dbba295b6126b0093f4a703bc34e3583b4cccde639b0b0d8661f9b921c0c0e1bdb520440f2bd0d07d381ff644c9028c51cd8dfbbf42eb6bfce82cac1658028ccab8ef7de661b2842f888c8b325d513f64993b73641513ac2713f80486762c8276758b76766c32812cfdb2d818a2edbe62e8d37cd21a42b296320fac094325fd65fc2e0c65304310298766f5f373f287302b31deae10c28bb43a87ef3951ea45e1003469bcb53f463f76b0bfd7b7efd4262e9839077e923a7589fee5bab19c4e"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x40001) (async) socket$xdp(0x2c, 0x3, 0x0) (async) sendmsg$xdp(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0xb, 0x0, 0x19}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000340)="b5e192368e9b95ceb7fb8c1d79f0be5e7193629653af6fb709507be5d7239522cfaaa3b74099be6cc6e86f73f88977193654b47566ee55780228dbef16a43c715d34c3dd194d96dda6117addb1b34e305227cde22ba31ebcca61ce52c0f0a527597614ee96dfa9fa934291d9d1ffa0e3b533b31eb8637d75fa557d6cb34406fa436713a24557", 0x86}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) 05:58:01 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(0x0, 0x0) 05:58:01 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x80741) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r1) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf257c0000000c00990000003f00460000000a0006000802110000010000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x5) 05:58:01 executing program 5: sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x40001) r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0xb, 0x0, 0x19}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000340)="b5e192368e9b95ceb7fb8c1d79f0be5e7193629653af6fb709507be5d7239522cfaaa3b74099be6cc6e86f73f88977193654b47566ee55780228dbef16a43c715d34c3dd194d96dda6117addb1b34e305227cde22ba31ebcca61ce52c0f0a527597614ee96dfa9fa934291d9d1ffa0e3b533b31eb8637d75fa557d6cb34406fa436713a24557", 0x86}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x40001) (async) socket$xdp(0x2c, 0x3, 0x0) (async) sendmsg$xdp(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0xb, 0x0, 0x19}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000340)="b5e192368e9b95ceb7fb8c1d79f0be5e7193629653af6fb709507be5d7239522cfaaa3b74099be6cc6e86f73f88977193654b47566ee55780228dbef16a43c715d34c3dd194d96dda6117addb1b34e305227cde22ba31ebcca61ce52c0f0a527597614ee96dfa9fa934291d9d1ffa0e3b533b31eb8637d75fa557d6cb34406fa436713a24557", 0x86}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) 05:58:01 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 05:58:01 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x90000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x10}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) 05:58:01 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x304c2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4d}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r3, 0xa287371d538b72f6}}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {r6, 0x20, "03a118", "f8aee91445f92d2a3fffaf1c3ac6231a27664d7a97693974cd978c79bd7e2cd707682628996109746dc76cdb267d8c65954964f68f0ae2d408308b598b64ddcfceebf2b72aa3f2e2e1d7aa23347dc29215fc132f7bd71a5876c8f873b5356f8c7df2d6565bab9d1ff4f16aae629a93d48d6a4ea6a281f8844c07aa56006352b27bb1cf6282cc683dda829de8ec459b6b1856a6f5e398b1106bcc387845fc9676a618e8133795770aad0050b66013756b3e8e00e42944798108d7321fe5b87bfc9a73a5521d412b73f15ad3984de7d5dddc9a82af0d4300e4d5be2ffdc4a49e6cf81306e7fad69c20b7f446b8d7753f388c23f774c0312c48da689eede2f7cb16"}}, 0x110) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r8, 0x91, '\x00', "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"}}, 0x110) 05:58:01 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x1f}, &(0x7f0000000140)=""/101, 0x65, &(0x7f00000001c0)=""/108, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r0}}, 0x58) 05:58:01 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 05:58:01 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x304c2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4d}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r3, 0xa287371d538b72f6}}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r7, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r9, 0x91, '\x00', "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"}}, 0x110) 05:58:01 executing program 1: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x90000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x10}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) 05:58:01 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 05:58:01 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x304c2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4d}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r3, 0xa287371d538b72f6}}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r5, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r7, 0x91, '\x00', "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"}}, 0x110) 05:58:01 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x1f}, &(0x7f0000000140)=""/101, 0x65, &(0x7f00000001c0)=""/108, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r0}}, 0x58) 05:58:01 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x80741) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r1) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf257c0000000c00990000003f00460000000a0006000802110000010000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x5) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x80741) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r1) (async) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf257c0000000c00990000003f00460000000a0006000802110000010000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x5) (async) 05:58:01 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x304c2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4d}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r3, 0xa287371d538b72f6}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r6, 0x91, '\x00', "d3186dc3d7d35f287948b3b394c23ed05d4048b9c13390b5a11043ccf80e14e06c835cea548ee7711b7c3fe4380050a3672e03cc227af44f7e409f2f7d43af68776126815dc2af6e5e1799cccb80864d85bac2444bf5f65691a44e6a2a6835f4069ca763f48695ded1dbb753e7fa0c53041faaba92d0e0f5de520a33ab515602ed850acbf6b7488c20d7f29ef6b7feb979770d007346bf6b3bebe5a030a1aaef1620a5f8aa97d48b69d4ae0425f65a0d415fb87dab38e796cd63b5a5c8c610942282008b7d10c4d7757e87f7458731b43cbc89bdd4cfcab5207c9b6c39198cf826e124dde05ddca02e0cddb5d11181f6e43e8908bfd430d035d32a4a7e63fbe6"}}, 0x110) 05:58:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 05:58:01 executing program 1: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x90000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x10}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) 05:58:01 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x1f}, &(0x7f0000000140)=""/101, 0x65, &(0x7f00000001c0)=""/108, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r0}}, 0x58) 05:58:01 executing program 5: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:01 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x304c2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4d}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r3, 0xa287371d538b72f6}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r6, 0x91, '\x00', "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"}}, 0x110) 05:58:01 executing program 5: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:01 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, 0x0, &(0x7f00000000c0), &(0x7f0000000100), {0x1f}, &(0x7f0000000140)=""/101, 0x65, &(0x7f00000001c0)=""/108, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r0}}, 0x58) 05:58:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async, rerun: 64) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 05:58:01 executing program 1: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x90000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x10}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) 05:58:01 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x304c2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4d}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r3, 0xa287371d538b72f6}}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r6, 0x91, '\x00', "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"}}, 0x110) 05:58:02 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x80741) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r1) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf257c0000000c00990000003f00460000000a0006000802110000010000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x5) 05:58:02 executing program 5: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) 05:58:02 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x304c2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4d}}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r4, 0x91, '\x00', "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"}}, 0x110) 05:58:02 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, 0x0, 0x0, &(0x7f0000000100), {0x1f}, &(0x7f0000000140)=""/101, 0x65, &(0x7f00000001c0)=""/108, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r0}}, 0x58) 05:58:02 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4}, 0xc) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x0, {0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0x400}}}, 0x38) 05:58:02 executing program 3: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000104bd7000fbdbdf250300000006001d0001800000050013000100000014001f00fc00000000000000000000000000000008000b0000000000050004003f0000000c000f00010400000000000006000e00ffff0000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x400000, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 05:58:02 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x304c2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r4, 0x91, '\x00', "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"}}, 0x110) 05:58:02 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, 0x0, 0x0, 0x0, {0x1f}, &(0x7f0000000140)=""/101, 0x65, &(0x7f00000001c0)=""/108, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r0}}, 0x58) 05:58:02 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x90000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x10}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) 05:58:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 05:58:02 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x304c2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r3, 0x91, '\x00', "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"}}, 0x110) 05:58:02 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4}, 0xc) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x0, {0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0x400}}}, 0x38) 05:58:02 executing program 3: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000104bd7000fbdbdf250300000006001d0001800000050013000100000014001f00fc00000000000000000000000000000008000b0000000000050004003f0000000c000f00010400000000000006000e00ffff0000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x400000, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 05:58:02 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x90000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x10}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) 05:58:02 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000140)=""/101, 0x65, &(0x7f00000001c0)=""/108, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r0}}, 0x58) 05:58:02 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4}, 0xc) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x0, {0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0x400}}}, 0x38) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4}, 0xc) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x0, {0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0x400}}}, 0x38) (async) 05:58:02 executing program 3: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000104bd7000fbdbdf250300000006001d0001800000050013000100000014001f00fc00000000000000000000000000000008000b0000000000050004003f0000000c000f00010400000000000006000e00ffff0000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async, rerun: 32) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x400000, 0x0) (rerun: 32) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 05:58:02 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x304c2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r3, 0x91, '\x00', "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"}}, 0x110) 05:58:02 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x90000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x10}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) 05:58:02 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10) 05:58:02 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x304c2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r3, 0x91, '\x00', "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"}}, 0x110) 05:58:02 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x0) syz_clone3(&(0x7f00000001c0)={0x908000, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x39}, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/42, &(0x7f0000000240)=[r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2], 0x5, {r0}}, 0x58) ioprio_set$pid(0x2, r3, 0x6000) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001cc0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x54, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7f}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "ac6a3883cce6507a733682bac794e912"}, @NL80211_ATTR_PMKID={0x14, 0x55, "f290fe440bd275cc595be78c4eee2b4b"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004004}, 0x40000) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x70, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x28}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0xc080) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x80) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000180)=0x19, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f00000018c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40421000}, 0xc, &(0x7f0000001880)={&(0x7f0000000240)={0x1610, r5, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x33}}}}, [@NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0x1}, @broadcast, @broadcast, @basic={{0x1, 0x0, 0x0, 0x0, 0x5}, {0x4}}}}, @NL80211_ATTR_FRAME={0x340, 0x33, @data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x8}, @broadcast, @device_a, @device_b, {0x4, 0x9c}, @device_b}, {0x3, 0x0, 0x1, 0x0, 0x5}}, {@type10={{0x0, 0x2, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x1}, @from_mac=@device_b, @broadcast, @initial, {0x9, 0x40}}, {0x0, 0x1, 0x2, 0x1, 0x1}}}, @ver_80211n={0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, @random="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"}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1264, 0x33, @data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x40}, @initial, @device_b, @device_a, {0x9}}, {0x7, 0x1, 0x1, 0x0, 0x1}}, {@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x380}, @device_a, @random="6c82ca074a30", @initial, {0x1, 0x2}}, {0x5, 0x1, 0x2}}}, @ver_80211n={0x0, 0x20, 0x2, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0x3b, "f038285b8f0278c0ee3b87712b6a9899441fbefb397852c6aace4f2506df7167a24751f4604f0a3b19953a7fa47e7d94b438a38c43a5e7fdec0460"}, {@device_b, @broadcast, 0xe, "847bc63fff5d007533b779367bd0"}, {@device_a, @device_a, 0xb5, "389470b704fb79bb885a47c3209e72628f0f03ddbb4d0d26b017969af4e2d9a2fe059883bf7db7c418cbcb93055031a08b75c94f735f08205b9bc998241639287a14d53f953c2cf73500a56240d77dc6865be81158bf94698311928c2dbf5937ede052efc4488488f393e56ab6894deab96feb6e21f58123936c48151b53418471aa73a24638af9f68e47976cb5678b1bed088b8a0a55f1291309efcfec750c794860334db14f451bc137d2f52e175865356db2aae"}, {@broadcast, @device_a, 0xdb, "0171ac9dfbe73dcc7b7f1447c5a831f28a0bb75e06f6bdb71fc7bc26c3e66e4dd62d36da74e3c5137f627ea4c58c24998a1f53a796bb02763ff8831f9b60fe45079709c4db01735a1eea101dbfdf273a5a2e2f0f3dc85ec83d43f3abcf0d7c5b7f204fcfab06b232ad51c7014134de4e2a30eb5106c6a0f08d9e0f8b672b99df6cfd28cedc3d8af0b4991dce041fa44ebee010c82fe8c559096837b2dc5ad7b27fa1035ebe0c01998e9b03d6cbbefc48bb544b23355140d6117ffc8c96ca9fcbfe01ebc95eaf7df424589e8195a47209e537ce2597525c79fda1e2"}, {@device_a, @device_b, 0x1000, "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"}]}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x63b1}, @broadcast}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x3f}, @device_b}}]}, 0x1610}, 0x1, 0x0, 0x0, 0x2}, 0x4060811) 05:58:02 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/108, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r0}}, 0x58) 05:58:02 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x90000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x10}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) 05:58:02 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r3, 0x91, '\x00', "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"}}, 0x110) 05:58:02 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10) 05:58:02 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x0) syz_clone3(&(0x7f00000001c0)={0x908000, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x39}, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/42, &(0x7f0000000240)=[r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2], 0x5, {r0}}, 0x58) ioprio_set$pid(0x2, r3, 0x6000) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) (async) getpgrp(0xffffffffffffffff) (async) ptrace$cont(0x7, r1, 0x0, 0x0) (async) getpgrp(0xffffffffffffffff) (async) ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x0) (async) syz_clone3(&(0x7f00000001c0)={0x908000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), {0x39}, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/42, &(0x7f0000000240)=[r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2], 0x5, {r0}}, 0x58) (async) ioprio_set$pid(0x2, r3, 0x6000) (async) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) 05:58:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001cc0), r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x54, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7f}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "ac6a3883cce6507a733682bac794e912"}, @NL80211_ATTR_PMKID={0x14, 0x55, "f290fe440bd275cc595be78c4eee2b4b"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004004}, 0x40000) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x70, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x28}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0xc080) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x80) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000180)=0x19, 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r4) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f00000018c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40421000}, 0xc, &(0x7f0000001880)={&(0x7f0000000240)={0x1610, r5, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x33}}}}, [@NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0x1}, @broadcast, @broadcast, @basic={{0x1, 0x0, 0x0, 0x0, 0x5}, {0x4}}}}, @NL80211_ATTR_FRAME={0x340, 0x33, @data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x8}, @broadcast, @device_a, @device_b, {0x4, 0x9c}, @device_b}, {0x3, 0x0, 0x1, 0x0, 0x5}}, {@type10={{0x0, 0x2, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x1}, @from_mac=@device_b, @broadcast, @initial, {0x9, 0x40}}, {0x0, 0x1, 0x2, 0x1, 0x1}}}, @ver_80211n={0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, @random="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"}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1264, 0x33, @data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x40}, @initial, @device_b, @device_a, {0x9}}, {0x7, 0x1, 0x1, 0x0, 0x1}}, {@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x380}, @device_a, @random="6c82ca074a30", @initial, {0x1, 0x2}}, {0x5, 0x1, 0x2}}}, @ver_80211n={0x0, 0x20, 0x2, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0x3b, "f038285b8f0278c0ee3b87712b6a9899441fbefb397852c6aace4f2506df7167a24751f4604f0a3b19953a7fa47e7d94b438a38c43a5e7fdec0460"}, {@device_b, @broadcast, 0xe, "847bc63fff5d007533b779367bd0"}, {@device_a, @device_a, 0xb5, "389470b704fb79bb885a47c3209e72628f0f03ddbb4d0d26b017969af4e2d9a2fe059883bf7db7c418cbcb93055031a08b75c94f735f08205b9bc998241639287a14d53f953c2cf73500a56240d77dc6865be81158bf94698311928c2dbf5937ede052efc4488488f393e56ab6894deab96feb6e21f58123936c48151b53418471aa73a24638af9f68e47976cb5678b1bed088b8a0a55f1291309efcfec750c794860334db14f451bc137d2f52e175865356db2aae"}, {@broadcast, @device_a, 0xdb, "0171ac9dfbe73dcc7b7f1447c5a831f28a0bb75e06f6bdb71fc7bc26c3e66e4dd62d36da74e3c5137f627ea4c58c24998a1f53a796bb02763ff8831f9b60fe45079709c4db01735a1eea101dbfdf273a5a2e2f0f3dc85ec83d43f3abcf0d7c5b7f204fcfab06b232ad51c7014134de4e2a30eb5106c6a0f08d9e0f8b672b99df6cfd28cedc3d8af0b4991dce041fa44ebee010c82fe8c559096837b2dc5ad7b27fa1035ebe0c01998e9b03d6cbbefc48bb544b23355140d6117ffc8c96ca9fcbfe01ebc95eaf7df424589e8195a47209e537ce2597525c79fda1e2"}, {@device_a, @device_b, 0x1000, "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"}]}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x63b1}, @broadcast}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x3f}, @device_b}}]}, 0x1610}, 0x1, 0x0, 0x0, 0x2}, 0x4060811) 05:58:02 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r2, 0x91, '\x00', "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"}}, 0x110) 05:58:02 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10) 05:58:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r2, 0x91, '\x00', "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"}}, 0x110) 05:58:02 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(0x0, 0x0) 05:58:02 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r0}}, 0x58) 05:58:02 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x0) syz_clone3(&(0x7f00000001c0)={0x908000, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x39}, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/42, &(0x7f0000000240)=[r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2], 0x5, {r0}}, 0x58) ioprio_set$pid(0x2, r3, 0x6000) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) (async) getpgrp(0xffffffffffffffff) (async) ptrace$cont(0x7, r1, 0x0, 0x0) (async) getpgrp(0xffffffffffffffff) (async) ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x0) (async) syz_clone3(&(0x7f00000001c0)={0x908000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), {0x39}, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/42, &(0x7f0000000240)=[r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2], 0x5, {r0}}, 0x58) (async) ioprio_set$pid(0x2, r3, 0x6000) (async) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) 05:58:02 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x180, r2, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x40, 0x6c}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x15a, 0x2a, [@dsss={0x3, 0x1, 0x8}, @rann={0x7e, 0x15, {{0x1, 0x6b}, 0x0, 0x7, @broadcast, 0x0, 0x200, 0x67a}}, @ssid={0x0, 0x6, @default_ap_ssid}, @chsw_timing={0x68, 0x4, {0xcd24, 0xcae4}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4}}, @tim={0x5, 0xbe, {0x9, 0x1c, 0x20, "f302d8b5be61da234fe01ea9ce6613d6122d656327685afe17ad36e7c43ff7e4b61b0b7cb4d4fcf041aae363138412988e5056af44fa9d8d76dab89e51ab61a7193e90a07003852303b101b708b7370b7772e75fd0e6ea4cffdc0f2eefbede5af0df5b956318777bfae5ff3ca02bde3a6dc6a8618fafa27fc30291bf05289a78451339c3620bacacd311c659c30a510be46ae531a9946b3a105fc74608458a5c36c79b7c06dc8445b1e675d2c378ca2a01eef69d52ba89acbf5b64"}}, @measure_req={0x26, 0x63, {0x40, 0x3, 0x5, "cab4a5749988f24f7b8bc54c0f486cdbf5a3fae953ce3dfbcd0a72928a9c1780496a6cb60097b0600991f45ee6f6d01bbe4cbdef7cdb2eebbf6d96af37e85c2481cf2457652d555f5ccb29a71085bd714309d35be0cdc6f8dc0559b758c77e69"}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x6001}, 0x4000000) 05:58:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r2, 0x91, '\x00', "d3186dc3d7d35f287948b3b394c23ed05d4048b9c13390b5a11043ccf80e14e06c835cea548ee7711b7c3fe4380050a3672e03cc227af44f7e409f2f7d43af68776126815dc2af6e5e1799cccb80864d85bac2444bf5f65691a44e6a2a6835f4069ca763f48695ded1dbb753e7fa0c53041faaba92d0e0f5de520a33ab515602ed850acbf6b7488c20d7f29ef6b7feb979770d007346bf6b3bebe5a030a1aaef1620a5f8aa97d48b69d4ae0425f65a0d415fb87dab38e796cd63b5a5c8c610942282008b7d10c4d7757e87f7458731b43cbc89bdd4cfcab5207c9b6c39198cf826e124dde05ddca02e0cddb5d11181f6e43e8908bfd430d035d32a4a7e63fbe6"}}, 0x110) 05:58:02 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(0x0, 0x0) 05:58:02 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000001100)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, r0}}, 0x18) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x5, 0xbc0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001180), 0x2, 0xfc85bff7e4c0cf92}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000001200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x7f}}, 0x10) read$qrtrtun(r1, &(0x7f00000000c0)=""/4096, 0x1000) r3 = syz_open_dev$vcsn(&(0x7f00000010c0), 0x0, 0x200000) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000001140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0xfff, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1}}}, 0x30) 05:58:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001cc0), r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x54, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7f}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "ac6a3883cce6507a733682bac794e912"}, @NL80211_ATTR_PMKID={0x14, 0x55, "f290fe440bd275cc595be78c4eee2b4b"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004004}, 0x40000) (async) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x70, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x28}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0xc080) (async, rerun: 64) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (rerun: 64) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x10) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x80) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000180)=0x19, 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f00000018c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40421000}, 0xc, &(0x7f0000001880)={&(0x7f0000000240)={0x1610, r5, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x33}}}}, [@NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0x1}, @broadcast, @broadcast, @basic={{0x1, 0x0, 0x0, 0x0, 0x5}, {0x4}}}}, @NL80211_ATTR_FRAME={0x340, 0x33, @data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x8}, @broadcast, @device_a, @device_b, {0x4, 0x9c}, @device_b}, {0x3, 0x0, 0x1, 0x0, 0x5}}, {@type10={{0x0, 0x2, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x1}, @from_mac=@device_b, @broadcast, @initial, {0x9, 0x40}}, {0x0, 0x1, 0x2, 0x1, 0x1}}}, @ver_80211n={0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, @random="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"}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1264, 0x33, @data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x40}, @initial, @device_b, @device_a, {0x9}}, {0x7, 0x1, 0x1, 0x0, 0x1}}, {@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x380}, @device_a, @random="6c82ca074a30", @initial, {0x1, 0x2}}, {0x5, 0x1, 0x2}}}, @ver_80211n={0x0, 0x20, 0x2, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0x3b, "f038285b8f0278c0ee3b87712b6a9899441fbefb397852c6aace4f2506df7167a24751f4604f0a3b19953a7fa47e7d94b438a38c43a5e7fdec0460"}, {@device_b, @broadcast, 0xe, "847bc63fff5d007533b779367bd0"}, {@device_a, @device_a, 0xb5, "389470b704fb79bb885a47c3209e72628f0f03ddbb4d0d26b017969af4e2d9a2fe059883bf7db7c418cbcb93055031a08b75c94f735f08205b9bc998241639287a14d53f953c2cf73500a56240d77dc6865be81158bf94698311928c2dbf5937ede052efc4488488f393e56ab6894deab96feb6e21f58123936c48151b53418471aa73a24638af9f68e47976cb5678b1bed088b8a0a55f1291309efcfec750c794860334db14f451bc137d2f52e175865356db2aae"}, {@broadcast, @device_a, 0xdb, "0171ac9dfbe73dcc7b7f1447c5a831f28a0bb75e06f6bdb71fc7bc26c3e66e4dd62d36da74e3c5137f627ea4c58c24998a1f53a796bb02763ff8831f9b60fe45079709c4db01735a1eea101dbfdf273a5a2e2f0f3dc85ec83d43f3abcf0d7c5b7f204fcfab06b232ad51c7014134de4e2a30eb5106c6a0f08d9e0f8b672b99df6cfd28cedc3d8af0b4991dce041fa44ebee010c82fe8c559096837b2dc5ad7b27fa1035ebe0c01998e9b03d6cbbefc48bb544b23355140d6117ffc8c96ca9fcbfe01ebc95eaf7df424589e8195a47209e537ce2597525c79fda1e2"}, {@device_a, @device_b, 0x1000, "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"}]}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x63b1}, @broadcast}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x3f}, @device_b}}]}, 0x1610}, 0x1, 0x0, 0x0, 0x2}, 0x4060811) 05:58:02 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x180, r2, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x40, 0x6c}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x15a, 0x2a, [@dsss={0x3, 0x1, 0x8}, @rann={0x7e, 0x15, {{0x1, 0x6b}, 0x0, 0x7, @broadcast, 0x0, 0x200, 0x67a}}, @ssid={0x0, 0x6, @default_ap_ssid}, @chsw_timing={0x68, 0x4, {0xcd24, 0xcae4}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4}}, @tim={0x5, 0xbe, {0x9, 0x1c, 0x20, "f302d8b5be61da234fe01ea9ce6613d6122d656327685afe17ad36e7c43ff7e4b61b0b7cb4d4fcf041aae363138412988e5056af44fa9d8d76dab89e51ab61a7193e90a07003852303b101b708b7370b7772e75fd0e6ea4cffdc0f2eefbede5af0df5b956318777bfae5ff3ca02bde3a6dc6a8618fafa27fc30291bf05289a78451339c3620bacacd311c659c30a510be46ae531a9946b3a105fc74608458a5c36c79b7c06dc8445b1e675d2c378ca2a01eef69d52ba89acbf5b64"}}, @measure_req={0x26, 0x63, {0x40, 0x3, 0x5, "cab4a5749988f24f7b8bc54c0f486cdbf5a3fae953ce3dfbcd0a72928a9c1780496a6cb60097b0600991f45ee6f6d01bbe4cbdef7cdb2eebbf6d96af37e85c2481cf2457652d555f5ccb29a71085bd714309d35be0cdc6f8dc0559b758c77e69"}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x6001}, 0x4000000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x180, r2, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x40, 0x6c}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x15a, 0x2a, [@dsss={0x3, 0x1, 0x8}, @rann={0x7e, 0x15, {{0x1, 0x6b}, 0x0, 0x7, @broadcast, 0x0, 0x200, 0x67a}}, @ssid={0x0, 0x6, @default_ap_ssid}, @chsw_timing={0x68, 0x4, {0xcd24, 0xcae4}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4}}, @tim={0x5, 0xbe, {0x9, 0x1c, 0x20, "f302d8b5be61da234fe01ea9ce6613d6122d656327685afe17ad36e7c43ff7e4b61b0b7cb4d4fcf041aae363138412988e5056af44fa9d8d76dab89e51ab61a7193e90a07003852303b101b708b7370b7772e75fd0e6ea4cffdc0f2eefbede5af0df5b956318777bfae5ff3ca02bde3a6dc6a8618fafa27fc30291bf05289a78451339c3620bacacd311c659c30a510be46ae531a9946b3a105fc74608458a5c36c79b7c06dc8445b1e675d2c378ca2a01eef69d52ba89acbf5b64"}}, @measure_req={0x26, 0x63, {0x40, 0x3, 0x5, "cab4a5749988f24f7b8bc54c0f486cdbf5a3fae953ce3dfbcd0a72928a9c1780496a6cb60097b0600991f45ee6f6d01bbe4cbdef7cdb2eebbf6d96af37e85c2481cf2457652d555f5ccb29a71085bd714309d35be0cdc6f8dc0559b758c77e69"}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x6001}, 0x4000000) (async) 05:58:02 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(0x0, 0x0) 05:58:02 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 05:58:02 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000001100)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, r0}}, 0x18) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x5, 0xbc0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001180), 0x2, 0xfc85bff7e4c0cf92}}, 0x20) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000001200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x7f}}, 0x10) (async) read$qrtrtun(r1, &(0x7f00000000c0)=""/4096, 0x1000) (async) r3 = syz_open_dev$vcsn(&(0x7f00000010c0), 0x0, 0x200000) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000001140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0xfff, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1}}}, 0x30) 05:58:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r2, 0x91, '\x00', "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"}}, 0x110) 05:58:02 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000001100)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, r0}}, 0x18) (async, rerun: 32) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x5, 0xbc0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001180), 0x2, 0xfc85bff7e4c0cf92}}, 0x20) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000001200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x7f}}, 0x10) (async) read$qrtrtun(r1, &(0x7f00000000c0)=""/4096, 0x1000) (async) r3 = syz_open_dev$vcsn(&(0x7f00000010c0), 0x0, 0x200000) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000001140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0xfff, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1}}}, 0x30) 05:58:02 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x10}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) 05:58:02 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x8000000000000000, 0x400080) r0 = pidfd_open(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r1) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)) pidfd_getfd(r0, r1, 0x0) 05:58:02 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r1) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x180, r2, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x40, 0x6c}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x15a, 0x2a, [@dsss={0x3, 0x1, 0x8}, @rann={0x7e, 0x15, {{0x1, 0x6b}, 0x0, 0x7, @broadcast, 0x0, 0x200, 0x67a}}, @ssid={0x0, 0x6, @default_ap_ssid}, @chsw_timing={0x68, 0x4, {0xcd24, 0xcae4}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4}}, @tim={0x5, 0xbe, {0x9, 0x1c, 0x20, "f302d8b5be61da234fe01ea9ce6613d6122d656327685afe17ad36e7c43ff7e4b61b0b7cb4d4fcf041aae363138412988e5056af44fa9d8d76dab89e51ab61a7193e90a07003852303b101b708b7370b7772e75fd0e6ea4cffdc0f2eefbede5af0df5b956318777bfae5ff3ca02bde3a6dc6a8618fafa27fc30291bf05289a78451339c3620bacacd311c659c30a510be46ae531a9946b3a105fc74608458a5c36c79b7c06dc8445b1e675d2c378ca2a01eef69d52ba89acbf5b64"}}, @measure_req={0x26, 0x63, {0x40, 0x3, 0x5, "cab4a5749988f24f7b8bc54c0f486cdbf5a3fae953ce3dfbcd0a72928a9c1780496a6cb60097b0600991f45ee6f6d01bbe4cbdef7cdb2eebbf6d96af37e85c2481cf2457652d555f5ccb29a71085bd714309d35be0cdc6f8dc0559b758c77e69"}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x6001}, 0x4000000) 05:58:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r2, 0x91, '\x00', "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"}}, 0x110) 05:58:02 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 05:58:02 executing program 5: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000005000000000000007f00000018470200fbffffff000000000000000000c7000802000000186a00000900000000000000080000008510000004000000107a1800010000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0xffffffff, 0x0, &(0x7f0000000140), 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x2, 0xcb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x30}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x88814}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r0, r1, 0x25, 0x10}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000800) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:02 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 05:58:02 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x8000000000000000, 0x400080) r0 = pidfd_open(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r1) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)) pidfd_getfd(r0, r1, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x8000000000000000, 0x400080) (async) pidfd_open(0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r1) (async) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)) (async) pidfd_getfd(r0, r1, 0x0) (async) 05:58:02 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x328, @mcast2, 0x1}, {0xa, 0x4e23, 0x7, @loopback, 0x6}}}, 0x48) 05:58:02 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), {0x10}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) 05:58:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r2, 0x91, '\x00', "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"}}, 0x110) 05:58:02 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 05:58:02 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x8000000000000000, 0x400080) (async) r0 = pidfd_open(0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r1) (async) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)) (async) pidfd_getfd(r0, r1, 0x0) 05:58:02 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x328, @mcast2, 0x1}, {0xa, 0x4e23, 0x7, @loopback, 0x6}}}, 0x48) 05:58:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r2, 0x91, '\x00', "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"}}, 0x110) 05:58:02 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x0, 0x0, 0x0, &(0x7f00000002c0), {0x10}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) 05:58:02 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 05:58:02 executing program 5: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000005000000000000007f00000018470200fbffffff000000000000000000c7000802000000186a00000900000000000000080000008510000004000000107a1800010000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0xffffffff, 0x0, &(0x7f0000000140), 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x2, 0xcb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x30}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x88814}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r0, r1, 0x25, 0x10}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000800) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:02 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x328, @mcast2, 0x1}, {0xa, 0x4e23, 0x7, @loopback, 0x6}}}, 0x48) 05:58:02 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x103200) r1 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x40}, 0x1, 0x0, 0x0, 0x48914}, 0x4000000) 05:58:02 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, {0x10}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) 05:58:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r2, 0x91, '\x00', "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"}}, 0x110) 05:58:02 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 05:58:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r1, 0x91, '\x00', "d3186dc3d7d35f287948b3b394c23ed05d4048b9c13390b5a11043ccf80e14e06c835cea548ee7711b7c3fe4380050a3672e03cc227af44f7e409f2f7d43af68776126815dc2af6e5e1799cccb80864d85bac2444bf5f65691a44e6a2a6835f4069ca763f48695ded1dbb753e7fa0c53041faaba92d0e0f5de520a33ab515602ed850acbf6b7488c20d7f29ef6b7feb979770d007346bf6b3bebe5a030a1aaef1620a5f8aa97d48b69d4ae0425f65a0d415fb87dab38e796cd63b5a5c8c610942282008b7d10c4d7757e87f7458731b43cbc89bdd4cfcab5207c9b6c39198cf826e124dde05ddca02e0cddb5d11181f6e43e8908bfd430d035d32a4a7e63fbe6"}}, 0x110) 05:58:02 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 05:58:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r1, 0x91, '\x00', "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"}}, 0x110) 05:58:02 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) 05:58:02 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x103200) (async) r1 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x40}, 0x1, 0x0, 0x0, 0x48914}, 0x4000000) 05:58:02 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) 05:58:02 executing program 5: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000005000000000000007f00000018470200fbffffff000000000000000000c7000802000000186a00000900000000000000080000008510000004000000107a1800010000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0xffffffff, 0x0, &(0x7f0000000140), 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x2, 0xcb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1]}, 0x80) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x30}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x88814}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r0, r1, 0x25, 0x10}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000800) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:02 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 05:58:02 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) 05:58:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r1, 0x91, '\x00', "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"}}, 0x110) 05:58:02 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x103200) (async) r1 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x40}, 0x1, 0x0, 0x0, 0x48914}, 0x4000000) 05:58:02 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) 05:58:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x91, '\x00', "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"}}, 0x110) 05:58:02 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 05:58:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x91, '\x00', "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"}}, 0x110) 05:58:02 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 05:58:02 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x325600) 05:58:02 executing program 4: syz_clone3(&(0x7f00000014c0)={0x380000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 05:58:02 executing program 4: syz_clone3(&(0x7f00000014c0)={0x380000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 05:58:02 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) 05:58:02 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) 05:58:02 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 05:58:02 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x325600) 05:58:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x91, '\x00', "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"}}, 0x110) 05:58:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x91, '\x00', "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"}}, 0x110) 05:58:02 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 05:58:02 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x325600) syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x325600) (async) 05:58:02 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2018a04}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r1, 0x2, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x7, 0xffff0000, 0xfff, 0xbf5]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xa99}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9dee}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x8804}, 0x40000) 05:58:02 executing program 4: syz_clone3(&(0x7f00000014c0)={0x380000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 05:58:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x91, '\x00', "d3186dc3d7d35f287948b3b394c23ed05d4048b9c13390b5a11043ccf80e14e06c835cea548ee7711b7c3fe4380050a3672e03cc227af44f7e409f2f7d43af68776126815dc2af6e5e1799cccb80864d85bac2444bf5f65691a44e6a2a6835f4069ca763f48695ded1dbb753e7fa0c53041faaba92d0e0f5de520a33ab515602ed850acbf6b7488c20d7f29ef6b7feb979770d007346bf6b3bebe5a030a1aaef1620a5f8aa97d48b69d4ae0425f65a0d415fb87dab38e796cd63b5a5c8c610942282008b7d10c4d7757e87f7458731b43cbc89bdd4cfcab5207c9b6c39198cf826e124dde05ddca02e0cddb5d11181f6e43e8908bfd430d035d32a4a7e63fbe6"}}, 0x110) 05:58:02 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2018a04}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r1, 0x2, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x7, 0xffff0000, 0xfff, 0xbf5]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xa99}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9dee}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x8804}, 0x40000) 05:58:02 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) 05:58:02 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x5, 0x351603) 05:58:02 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 05:58:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x91, '\x00', "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"}}, 0x110) 05:58:02 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 05:58:02 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) (async) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2018a04}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r1, 0x2, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x7, 0xffff0000, 0xfff, 0xbf5]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xa99}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9dee}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x8804}, 0x40000) 05:58:02 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x5, 0x351603) 05:58:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r2, 0x91, '\x00', "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"}}, 0x110) 05:58:02 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 05:58:03 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000002, 0x8010, r0, 0x0) 05:58:03 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 05:58:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r2, 0x91, '\x00', "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"}}, 0x110) 05:58:03 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) 05:58:03 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x5, 0x351603) syz_open_dev$vcsn(&(0x7f0000000080), 0x5, 0x351603) (async) 05:58:03 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000002, 0x8010, r0, 0x0) 05:58:03 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x7}, 0x58) 05:58:03 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 05:58:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r2, 0x91, '\x00', "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"}}, 0x110) 05:58:03 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000002, 0x8010, r0, 0x0) 05:58:03 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(0x0, 0x0) 05:58:03 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r1, 0x91, '\x00', "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"}}, 0x110) 05:58:03 executing program 2: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="46d686ee", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250400000008000200080000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44001) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001640)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000016c0)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001440)=r4, 0x1) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000001d80)=ANY=[@ANYBLOB="eeffffffb88f19aa24bbea12b2fedb3dce98adaf9cf21abf6d1a6751a859551d77fb37490962e882693736f4b3a6c46206a1", @ANYBLOB="0e559ce0985d7bde66658361abd1ad39ab34a3a9900f2b9e9106d1ae3f2839a00c22b15b06565027c99d1d910e2587d5940b21d46a7a52b53c6bed05abd24ce52745f4e533cb0b4eb2a09bd79295df00da70710360617f44302a7ccc936f4b8cc29db845d03cde9a9aa891beee038bc697b4b30f829b4c8242b8a1254832a82aca46a8d062", @ANYBLOB="00042cbd7000fbdbdf256a00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990020000000580000000500d2000c0000000500d208010000000500d2000700eb000500d202000000000500d200a360f981fd080000000a0006000802118a2118de95c0c33bb4eb2389513a2d8394a2bf8b1595b53651112162ad219a5f95e5cd7148629ede6c33c409b636b0ad43cbaa5a7ae19e72a30f30cdfa73130b11f99d6573ca0149f13baf22d799576575ab8afa52c88662405e12b3adc003f1c74473bc580e674eb2aaba82f58746a82f73630567b31721b0867d58070bc2fa6c6fe7e28d068fe010cd4c5b66c8322dc952a70f36c4e3590d25d4c2cebdd3014c95223495ea996f30186a1a493de27b5aecad8b26efe9b77a0585c53811bc3d788f918f1ac4643906aef3865b62dacd60387ec9f75c8b862b8277e3cf5c0dca6670ba747bdd8c1c73fec3c2a4bb51ef754845418f3b626610cceeec02ebe4685d59382f4217b2f70afac9149fb5bf09f316b96edd234b93132db958b7ba0a73cb5c22b8f04275bc45e60c10347104c461bd43663aaf1194bd2d0a9ac95eef674795f3920812f3fc547f05a5499f1943cda46b4d18cb0f9b1a5c3e43aa4c36cd1337b3bc81336de5f4f3e781603246b1f36f5999682aec9c93631cc0fc3b33ee6a9c99cb7bcaf6ae7985883c700f7ac821f371c9138c3730ea7c303bc273885d263d31681319514eedbeffa0fa0fb515bbe1ac4a4522b8e2921b2beec480fa4da30e99aa289513fe569f90891c035ac7ae2af7cb4247b632c4b1611189db22db8bf01c1078dc21f5f9479562cd2e778aa46042c1"], 0x5c}, 0x1, 0x0, 0x0, 0x20000051}, 0x40048c5) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000001600)={0xc, 0x8, 0xfa00, {&(0x7f0000001480)}}, 0x10) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) io_uring_setup(0x31e6, &(0x7f0000000200)={0x0, 0x89ee, 0x16, 0x4, 0x1fb}) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 05:58:03 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r1, 0x91, '\x00', "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"}}, 0x110) 05:58:03 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6}, 0x58) 05:58:03 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r1 = socket(0x2a, 0x800, 0x5) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=0xffffffffffffffff, 0x4) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x4000001) 05:58:03 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) 05:58:03 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(0x0, 0x0) 05:58:03 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r1, 0x91, '\x00', "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"}}, 0x110) 05:58:03 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x3, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r0}, 0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:03 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r1 = socket(0x2a, 0x800, 0x5) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=0xffffffffffffffff, 0x4) (async) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x4000001) 05:58:03 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(0x0, 0x0) 05:58:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, 0x0, 0x0) 05:58:03 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4}, 0x58) 05:58:04 executing program 2: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="46d686ee", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250400000008000200080000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44001) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001640)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000016c0)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001440)=r4, 0x1) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000001d80)=ANY=[@ANYBLOB="eeffffffb88f19aa24bbea12b2fedb3dce98adaf9cf21abf6d1a6751a859551d77fb37490962e882693736f4b3a6c46206a1", @ANYBLOB="0e559ce0985d7bde66658361abd1ad39ab34a3a9900f2b9e9106d1ae3f2839a00c22b15b06565027c99d1d910e2587d5940b21d46a7a52b53c6bed05abd24ce52745f4e533cb0b4eb2a09bd79295df00da70710360617f44302a7ccc936f4b8cc29db845d03cde9a9aa891beee038bc697b4b30f829b4c8242b8a1254832a82aca46a8d062", @ANYBLOB="00042cbd7000fbdbdf256a00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x20000051}, 0x40048c5) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000001600)={0xc, 0x8, 0xfa00, {&(0x7f0000001480)}}, 0x10) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) io_uring_setup(0x31e6, &(0x7f0000000200)={0x0, 0x89ee, 0x16, 0x4, 0x1fb}) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) pidfd_open(0xffffffffffffffff, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="46d686ee", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250400000008000200080000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44001) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001640), 0x111, 0x3}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000016c0)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) (async) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001440)=r4, 0x1) (async) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000001d80)=ANY=[@ANYBLOB="eeffffffb88f19aa24bbea12b2fedb3dce98adaf9cf21abf6d1a6751a859551d77fb37490962e882693736f4b3a6c46206a1", @ANYBLOB="0e559ce0985d7bde66658361abd1ad39ab34a3a9900f2b9e9106d1ae3f2839a00c22b15b06565027c99d1d910e2587d5940b21d46a7a52b53c6bed05abd24ce52745f4e533cb0b4eb2a09bd79295df00da70710360617f44302a7ccc936f4b8cc29db845d03cde9a9aa891beee038bc697b4b30f829b4c8242b8a1254832a82aca46a8d062", @ANYBLOB="00042cbd7000fbdbdf256a00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x20000051}, 0x40048c5) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000001600)={0xc, 0x8, 0xfa00, {&(0x7f0000001480)}}, 0x10) (async) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) (async) io_uring_setup(0x31e6, &(0x7f0000000200)={0x0, 0x89ee, 0x16, 0x4, 0x1fb}) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) (async) 05:58:04 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r1 = socket(0x2a, 0x800, 0x5) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=0xffffffffffffffff, 0x4) (async, rerun: 32) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x4000001) (rerun: 32) 05:58:04 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) 05:58:04 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 05:58:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, 0x0, 0x0) 05:58:04 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x3, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r0}, 0x4) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:04 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 05:58:04 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x68, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x1, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x18000}, 0x40) 05:58:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, 0x0, 0x0) 05:58:04 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 05:58:04 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x68, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x1, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x18000}, 0x40) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x68, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x1, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x18000}, 0x40) (async) 05:58:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x91, '\x00', "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"}}, 0x110) 05:58:04 executing program 2: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="46d686ee", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250400000008000200080000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44001) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001640)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000016c0)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001440)=r4, 0x1) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000001d80)=ANY=[@ANYBLOB="eeffffffb88f19aa24bbea12b2fedb3dce98adaf9cf21abf6d1a6751a859551d77fb37490962e882693736f4b3a6c46206a1", @ANYBLOB="0e559ce0985d7bde66658361abd1ad39ab34a3a9900f2b9e9106d1ae3f2839a00c22b15b06565027c99d1d910e2587d5940b21d46a7a52b53c6bed05abd24ce52745f4e533cb0b4eb2a09bd79295df00da70710360617f44302a7ccc936f4b8cc29db845d03cde9a9aa891beee038bc697b4b30f829b4c8242b8a1254832a82aca46a8d062", @ANYBLOB="00042cbd7000fbdbdf256a00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x20000051}, 0x40048c5) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000001600)={0xc, 0x8, 0xfa00, {&(0x7f0000001480)}}, 0x10) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) io_uring_setup(0x31e6, &(0x7f0000000200)={0x0, 0x89ee, 0x16, 0x4, 0x1fb}) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) pidfd_open(0xffffffffffffffff, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="46d686ee", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250400000008000200080000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44001) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001640), 0x111, 0x3}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000016c0)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) (async) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001440)=r4, 0x1) (async) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000001d80)=ANY=[@ANYBLOB="eeffffffb88f19aa24bbea12b2fedb3dce98adaf9cf21abf6d1a6751a859551d77fb37490962e882693736f4b3a6c46206a1", @ANYBLOB="0e559ce0985d7bde66658361abd1ad39ab34a3a9900f2b9e9106d1ae3f2839a00c22b15b06565027c99d1d910e2587d5940b21d46a7a52b53c6bed05abd24ce52745f4e533cb0b4eb2a09bd79295df00da70710360617f44302a7ccc936f4b8cc29db845d03cde9a9aa891beee038bc697b4b30f829b4c8242b8a1254832a82aca46a8d062", @ANYBLOB="00042cbd7000fbdbdf256a00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x20000051}, 0x40048c5) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000001600)={0xc, 0x8, 0xfa00, {&(0x7f0000001480)}}, 0x10) (async) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) (async) io_uring_setup(0x31e6, &(0x7f0000000200)={0x0, 0x89ee, 0x16, 0x4, 0x1fb}) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) (async) 05:58:04 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[0x0], 0x1}, 0x58) 05:58:04 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 05:58:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x91, '\x00', "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"}}, 0x110) 05:58:04 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x68, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x1, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x18000}, 0x40) 05:58:04 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x3, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r0}, 0x4) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:04 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 05:58:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x91, '\x00', "d3186dc3d7d35f287948b3b394c23ed05d4048b9c13390b5a11043ccf80e14e06c835cea548ee7711b7c3fe4380050a3672e03cc227af44f7e409f2f7d43af68776126815dc2af6e5e1799cccb80864d85bac2444bf5f65691a44e6a2a6835f4069ca763f48695ded1dbb753e7fa0c53041faaba92d0e0f5de520a33ab515602ed850acbf6b7488c20d7f29ef6b7feb979770d007346bf6b3bebe5a030a1aaef1620a5f8aa97d48b69d4ae0425f65a0d415fb87dab38e796cd63b5a5c8c610942282008b7d10c4d7757e87f7458731b43cbc89bdd4cfcab5207c9b6c39198cf826e124dde05ddca02e0cddb5d11181f6e43e8908bfd430d035d32a4a7e63fbe6"}}, 0x110) 05:58:04 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000013c0)}, 0x58) 05:58:04 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r1 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000001280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000400}, 0xc, &(0x7f0000001240)={&(0x7f00000001c0)={0x1068, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "427a6a8db35001701f79aeeaae2a82e0a1f206cd836ba14d20b66808062dde27c6289be3b2d21c4b699dac998cde7b5d038604be35c1fdd87f791cf1a3bcf7ac44331beeff4f08338c5d8aa5baef5f2504553dcb268e106868bcdb1ed9b40ed14502503d0a234c3e0fed3c67a1b6659dde43d1ed1cdd48d7aa2b2d73637ee7f2f2743677b0fcf73fdd8672af0bf1509fb7beec5bf409fff82d1c07b1cc431089132940f0c3c9bce4ec56c5ac81f1616622253bec11521ed25eed0989617f213c490dfe8a5bbc8cc63c87db10772f45c411ee57a19994f7b12c3e9021aa2df84414b6a456bab7135887fcbfe00c06582968d2c7f5e1f22b636958571839396fa044f1d56154310ba67a38dd8a7b7a706abb75eb85b834671827ce60e192b5184f42f0379497bf08b2c1a70c493a4ae1fb087458a42c01f97de61bccf1f12219d39ca4d9f1d329af7e35f643b77042b189e7041bf933d39b888d640a5682724a78eb439567431e0152e78839547002764d01ee552d66ec33230fed542ba8c0aee67b0ed95f3ebec9aa279c508f43d6ce0df7e2a40f84e0eb9a4a2404128b2645ba57e2430427f16c8f632577e3080fb7132c5a23cee29f6aea8c8b9dfb1136ccc4dc24ed36b8926f578db0e893bb6d6e09bf35ae8e18719cab6abf6579790372ab0cf447181dad48b1e628ba53dd42661f05837f13bfb700e9102788e0723f388893435799519bb4eb984412d1d5e1dbe8c8b59e7998d16258c7f8533a39a392769e4076903ab4bbffa7743640cbcd56feb6088e84c2e7842f6c2a89745640dfb3509f975403c691885c651b53f5f9cd4e9e8799a3bf9e9543ed605db11d05dbf3045192ce493444ba023c4fb9810453eb6bf11118d3e56b2208509140824f293c769dd1080083389cc0bb86e10a241eb26c80cc0f213b964824448ef34c3a83134013d1a35f8d1378f7d4cabe02ea4b490f95ad69923759d44b3e44519716e1fd157d972ef12ede7ad7c9f33fb177d3ab08ad120914006a1a82bb244c11a25f617ef6ac5f8b10b17931dd6f716ac9a3296af84f3b211ca675ceeeda8796eecc7949467442dd7c9ced40d6d40ad1d3a65baecf3069eb706d12d8a2ce7450f71d25f6c73ffa3625979fdfa308ca6a7f68a464f5e210243265e73d3796e16dc3126bb55b5f483bd6400c2b2c0a967aae6a4786189478462f2afbe1b37d558c6599124073e9eed4cb440f7bcaebd82b8d709768efd74a03b04c6b89621de16f9a5495dca386a9d7db972dc9149acb8a634b32b0ce41fe09fa011fb88cac780324f7ba564671a039d1bacb3e67fbff36fdc46a185b0c0577fb15a1dc012b4c304c63378da5fdf187948a415d8593b5530d63e3eb6baafe1b2551ed682cf49cff605d4fb9e10d50c7ddab91b6d34b6722e0b057442206313f77aafb9e35effa97b083fb0cadfd772d8dac099b45d1e2974e01f9d36d1456e248662979ded1e5409e98827f9b06e8fc5bc7fac3c13589e1bf01dd5aa555586bd2d0015f451d82cedc2b7498ac0e00be6ce44b10f78a7423d3e317ef346f1f003bc05133b40c7cd6b337fd8adeb1e614fb1ac23ff3845236684d62c7deed82bf37240c08ce05247cbd040ed7de7f12febeaff4e0c0a3e9aec6980a9d6a2749905c0a04575388f00b69179bd1482345c49b825d84d3e0a272d1729642f0ea313ece14a72c9c19180412f0c8bcaa2a5639bbb518dd2cbbac508338cf289ebdd0d6f3b69292eec515047c4ad980bd74aa8153c212a8ef0dffc01d12cacf86f12e8c5d26cfd545c797a2a5f4f16a15c665be53efa1d068f4f2e5e3fa9391ba1790ae8762f848df9668f8784b17766b9b0684c0c33ef26c1d835d1449a03092a51ae966754ab6e70d472c40207fd30604e1681d4c01dfceb6884c7106956ce8e7301d64e2b239ea7e2162f04d2c5d63774d9b9c29002807bedd507c0ee5cdbb479d56810df3650d68d54a538d442907d823a757d604af119970a4e4616804baeea44463a6ed2b77a110adc0314d66fcb2621fd168353062ea039f75b19db466c16a74ee96631001286d070be3b2092bdebefd83de8f72177544a674aa58b793f52d0786273e7bfb0d2a46a4181572af4795ab6d2180a62cb950794faffba8c2bb7ea482727a9f55671023b8d8681040272aff46296437d044fd9466100d4d771b3e61d4f5cca3fbb4243e491a87388eab9f2439c9bf7ddc94ea765b5b3783206ab62bd6ad2b6ae7081de3ba6303823ee36cf894f72c1d014f3028dd9864a2d93844581218ea37cec94e38d06d13436a5f14bec96e7df80bcc157064e9219a72b9599502c5a2dff9edff7be8fe8e81d3a443f81e7cd1b59b9749944c31e8e97f5f44f677583549cd93674ccf58fa1412baac1129afb6e4b6ebc5e490d82082d51cb39edf229ce93cdec0b6d6733c7c654cd5658fb1d55795545ed5556eaa91f6ad9ef5218fe65e773cf102aa83823637a5f3ecb67b08ff1ee4bcf0dfafb67f99f8d8f2b57278d32f1dc5ba91eb8043cb07801927e0f74e7ff7d9e1954e1b58fa7265f814ee550050e94810842eccb778cd55fa16edd3f85ea805a877184326f65e8192dbcb5bad43f29866c135dcf4f7cbeb0aede8551a78e6c83bf684328a736d6fca1e64cd71e598f1d61dcf027a683ff69747b4e9522bc1af313263fecd5afa0e9c20c1b75d8f74c58ebc7b608d35783e195940b80ffc7d4a13c4892f2026ee8daa6e6932b8c3e3c48ab4cc04efee60c861427838040055e0d85365c5e2fc43d711f3dbe9a163d74eb532bd3584f922b74fc7e04aa4a71a2f3dc4bc41f7c403a357738317e3bf6a9eb2639998b26a1a54f5cc253ff8f7e7e0d56413873c25dcea5793a4a680a02f917d212d15b332fc17a95beba3dbbd33bc3b6c2f9fe605357c6faf8af1f876ecffe5c548584637b96fe9d7a3606d75958fbdbadce65faca5d4dc215568ce0589efaac18c8af26e8c0aefb35b728767946be815bcdd9eaf766f6e7c6887ab82890a80135e9473b19d6db6f4839b9eb6e22c57e62a1c7996a7a0cb8d1458e5075000f84cba9c8c78fa1f4765df3f93f179ea21eaf3fe80f7eba414c784ab9f1719610477c80b6d0393e622a29a873408f40ba122196ede2732b9db7a2cb006ce4e8db04666a82f411101a08070d4f46e7948b29e5457a83d52b8ba1569bf4492a695183c523d149b08fbc2d34439b27b09ffebe34c831811af10cc4e026f0c8b5e34b02e5e279af6d1ed13064a885c6b6513225542afebcfe59af7cbf7d4e0ba7ee993afa8ab0533da9a0c2085e2864cd5c2545370da4ff4d5af9179be01d8a9679739403c131d05a0928b572a5487b3c279ce59780c24ea467ec0622c2ea2a52c4ffdd49600a8a6308f964f74b607a25b6b9fcf2fb78fe6169681a44a84eb87fef2b086b2e29446eba1b7b8600cb78d0df977108fe093ebf98cfa12c08d83858ae0ac56c6e8f64be3f692fd1d9f2386e0545789aa527fda735d05866f0c6cccf9ca29702494d71e1eca018f647fdbc87d80c0144433032a50ad216237ce63683308042dfee18d217c6c11fbcd78bcc1dcba5aa16b73640229b26a2b06fdfc954093b3b7e83b7178da10534486066f626c378815f34124ddcde3e0efefebec34b91a46e08bc6a80e873561d7159b7bfae9bbad50f09f6f08d6320d8f3769a1f1eb8725eeec22456949cb7bb6b8b6f9bf8a3dfc4dc77838f9f0f7252ffeaaf5b6453f9bfb6f2b3e2001efd9ab0508ecd56168bb2c737d05de239f3f21406c2df3a24030e82776ef4856006d2405b7fa8016bcac8d6c128f3a1bc7c30d202f12407db7ba049b814e1ff5e940568548f417f173f6683365986dbb5173fa84c821ac906068b61d1e031c472a5289210dc24ef951b1538d9e2a7ebfe95715e749872cc876cc7bb0d1acfd4a971201a2cbbfdc5354f2f82c7fd879c5903396a76d90d623e13222add877f7e94b5405b23a05f0a0e1b5cd25c662a332b58b7ff58dd4bef01c7deebe238335df6e6351c3e35a667c6cb99a373304fbc7424acb975a2d229001f7008e053b7704980552c8eae4abf0d66b72710434f47a15197d26c54257f43a6c5b75626f0ae604fe6fb85a165ac96795deab5bfb23baf8bbd07fe5c26bbef41763d879b0e0792fbfc403c6b902b5f694a0c3766ac4f7e7792c26dd60611850fce9a089182fcca61eed61a8e2d4ba4c113210bf6b959db54b6d8527ed2166ee478c69dc0cc8fc52a0e7b18b6b7c173030976ead041ab3c8ce9c0d0d94c141aad7643622e5152076a2b8219ed794253f865b5b44bca58a45aad38f25504abcffabb9e023cbbb6f588d5035caf3702b7a6adc752db3ea55efd2c3111e07febbca52da61fde4816e3344efffd155523eb030c122c24dd3e301d19b1f264b8d6e8199b87bc5548067d93d1844541c0addeaa36373f207642a6ec30c4fc57f243ea48e53ade27d0e05ce5a9f849528ae8f7c505f9c99403ceec7f3ed5ba58fd0750f4720a5536a82581bd0d16cfbe0ac266c4407034781861286bef72da5b8a58adbe581c208e0b48f739e31e21f9deb9f149dc461d9830927f2d51c98565e27145547815e4fdf6d847660517572fc4f89221bbb0a6fba30673c73e153de7f0dbd4819570d5df55a1a21edd453078eab7dee374377c65d00dde384c3e734de544be04421ddaa63b18fcb9b2f1c833c42bdb368de1f7890870de2531218567784d1933188fa7849fb14a778f4d1d46d004f6d1ee0798b7ca46ac5482c3886fd1dc80b2ce193cec0976af6027367df039fe26179c637533e1a119b6fe486d52a3fec0f0d513ceae9f1b07e74754754b62006f471b31a0f86afc3904e4f2c595418ca0c6b0f831fcf1fab5218b7d1b50b0c3c2ea97f54aa4f31c4a3e7682b9a1d70ad1e6dd20c3ebf861f18d987e21250a87cf54d5685f7fc5ac9a9f1c4f7257791260b701327d1e46a0d25618e77aeb1288fa934f3dc597299664047e03637ddbb44a086f334ba50335f270076a80de1340452e8dccd7822ed42934d14b1b469a6fc7ad7d8cd8ff629a7fbd1e56bca0899a05c1254e0483f0167da3820560aa5a3300440d2bb2c408dd9aec9049e84d38fb4012b9f35ff93fdc4e34386026695aeaa27d154035ea19c1a0d7e6aca101a225d4f6687254f744adc14c99198b729c09e8d1b59ea030fae739feba5af7a4555ba57eb837ef0d53ee1824285944e5371ea59ced3b1ff90f4e207804d2082ab92c9fbce8ed1d1f3b2207ced38dd1d437a8dd6e62544a92bb60a02bb2bbc47a5fa5b5182e0c514a2e9f5e324284c61378f4d0a49fa39030502282348755a1fd4060e766b0cac670dd2310013bd33077e2638d6cad94646dccbb53711b4db17e3042788a8893bb64162ba1e1f2e1c60b36b10e9d3abe4ad2cb160e0c530334ea008bb993f39b251981d1c7c18693cc9f21deee8dd70a3c0b6c478c72bad9253592ec64bc04a41765ca7c94c8f1de31d9190d8cd5939fd2b5aad1eb1b7978e9011139de26a481a605f7e7f9fd0669ea9646602a1714332890103157844e615d5fae673076c3bd17a8a1d90c6b204fb27fe17e9ecdfe6fbc8ebeae65a77135a014ea2de083a475f2da3fbba2a34b9d41e9f749ef5dc615d91695da823f05417e1bc25dc079c1e7983c33c517ae74200e687910a69a3becbaf06536869596b7c02813e83bfbe630ac0b2c892767375ceae389e137a86ee2c7b86b9244ab8e4723e13bb54e2561e849578a16f9c9f3c4ff9889123945bb5c8fa"}, @NL80211_ATTR_TESTDATA={0x5, 0x45, 'A'}, @NL80211_ATTR_TESTDATA={0x44, 0x45, "59a2e108f65a51a5bd55abe0c6142cac660a96bba6437e0a9018eef181c623dbbac916591c04c0a762e5700e9dcf4c3ff50491aabccfcac3372bc45295e3c0a9"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1068}, 0x1, 0x0, 0x0, 0x40000}, 0x2000800) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x5c, r2, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x20}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8081}, 0x40000) 05:58:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r2, 0x0, '\x00', "d3186dc3d7d35f287948b3b394c23ed05d4048b9c13390b5a11043ccf80e14e06c835cea548ee7711b7c3fe4380050a3672e03cc227af44f7e409f2f7d43af68776126815dc2af6e5e1799cccb80864d85bac2444bf5f65691a44e6a2a6835f4069ca763f48695ded1dbb753e7fa0c53041faaba92d0e0f5de520a33ab515602ed850acbf6b7488c20d7f29ef6b7feb979770d007346bf6b3bebe5a030a1aaef1620a5f8aa97d48b69d4ae0425f65a0d415fb87dab38e796cd63b5a5c8c610942282008b7d10c4d7757e87f7458731b43cbc89bdd4cfcab5207c9b6c39198cf826e124dde05ddca02e0cddb5d11181f6e43e8908bfd430d035d32a4a7e63fbe6"}}, 0x110) 05:58:04 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 05:58:04 executing program 2: getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x4010, r0, 0x80000002) 05:58:04 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000013c0)}, 0x58) 05:58:04 executing program 0: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="46d686ee", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250400000008000200080000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44001) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001640)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000016c0)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001440)=r4, 0x1) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000001d80)=ANY=[@ANYBLOB="eeffffffb88f19aa24bbea12b2fedb3dce98adaf9cf21abf6d1a6751a859551d77fb37490962e882693736f4b3a6c46206a1", @ANYBLOB="0e559ce0985d7bde66658361abd1ad39ab34a3a9900f2b9e9106d1ae3f2839a00c22b15b06565027c99d1d910e2587d5940b21d46a7a52b53c6bed05abd24ce52745f4e533cb0b4eb2a09bd79295df00da70710360617f44302a7ccc936f4b8cc29db845d03cde9a9aa891beee038bc697b4b30f829b4c8242b8a1254832a82aca46a8d062", @ANYBLOB="00042cbd7000fbdbdf256a00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x20000051}, 0x40048c5) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000001600)={0xc, 0x8, 0xfa00, {&(0x7f0000001480)}}, 0x10) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) io_uring_setup(0x31e6, &(0x7f0000000200)={0x0, 0x89ee, 0x16, 0x4, 0x1fb}) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 05:58:04 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000013c0)}, 0x58) 05:58:04 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r1 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000001280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000400}, 0xc, &(0x7f0000001240)={&(0x7f00000001c0)={0x1068, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x5, 0x45, 'A'}, @NL80211_ATTR_TESTDATA={0x44, 0x45, "59a2e108f65a51a5bd55abe0c6142cac660a96bba6437e0a9018eef181c623dbbac916591c04c0a762e5700e9dcf4c3ff50491aabccfcac3372bc45295e3c0a9"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1068}, 0x1, 0x0, 0x0, 0x40000}, 0x2000800) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x5c, r2, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x20}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8081}, 0x40000) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) socket(0x0, 0x0, 0x6) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000001280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000400}, 0xc, &(0x7f0000001240)={&(0x7f00000001c0)={0x1068, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x5, 0x45, 'A'}, @NL80211_ATTR_TESTDATA={0x44, 0x45, "59a2e108f65a51a5bd55abe0c6142cac660a96bba6437e0a9018eef181c623dbbac916591c04c0a762e5700e9dcf4c3ff50491aabccfcac3372bc45295e3c0a9"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1068}, 0x1, 0x0, 0x0, 0x40000}, 0x2000800) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x5c, r2, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x20}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8081}, 0x40000) (async) 05:58:04 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0xc) 05:58:04 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 05:58:04 executing program 2: getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x4010, r0, 0x80000002) 05:58:04 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) r1 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) (rerun: 64) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000001280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000400}, 0xc, &(0x7f0000001240)={&(0x7f00000001c0)={0x1068, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x5, 0x45, 'A'}, @NL80211_ATTR_TESTDATA={0x44, 0x45, "59a2e108f65a51a5bd55abe0c6142cac660a96bba6437e0a9018eef181c623dbbac916591c04c0a762e5700e9dcf4c3ff50491aabccfcac3372bc45295e3c0a9"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1068}, 0x1, 0x0, 0x0, 0x40000}, 0x2000800) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x5c, r2, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x20}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8081}, 0x40000) 05:58:04 executing program 1: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000001300)=""/191, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) 05:58:04 executing program 2: getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x4010, r0, 0x80000002) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x4010, r0, 0x80000002) (async) 05:58:04 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x380000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r0}}, 0x58) 05:58:04 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x67}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80) 05:58:04 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0xc) 05:58:05 executing program 0: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="46d686ee", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250400000008000200080000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44001) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001640)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000016c0)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001440)=r4, 0x1) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000001d80)=ANY=[@ANYBLOB="eeffffffb88f19aa24bbea12b2fedb3dce98adaf9cf21abf6d1a6751a859551d77fb37490962e882693736f4b3a6c46206a1", @ANYBLOB="0e559ce0985d7bde66658361abd1ad39ab34a3a9900f2b9e9106d1ae3f2839a00c22b15b06565027c99d1d910e2587d5940b21d46a7a52b53c6bed05abd24ce52745f4e533cb0b4eb2a09bd79295df00da70710360617f44302a7ccc936f4b8cc29db845d03cde9a9aa891beee038bc697b4b30f829b4c8242b8a1254832a82aca46a8d062", @ANYBLOB="00042cbd7000fbdbdf256a00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x20000051}, 0x40048c5) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000001600)={0xc, 0x8, 0xfa00, {&(0x7f0000001480)}}, 0x10) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) io_uring_setup(0x31e6, &(0x7f0000000200)={0x0, 0x89ee, 0x16, 0x4, 0x1fb}) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 05:58:05 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x67}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x67}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) 05:58:05 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x0) syz_clone3(&(0x7f00000001c0)={0x908000, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x39}, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/42, &(0x7f0000000240)=[r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2], 0x5, {r0}}, 0x58) ioprio_set$pid(0x2, r3, 0x6000) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:05 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x9, 0xa, 0x9) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4, 0x1f, 0x7, 0x4, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_spirange={0x2, 0x10, 0x4d5, 0x4d3}]}, 0x20}}, 0x4040014) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 05:58:05 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r6, 0x8}}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100)={0x62}, 0x1) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:05 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0xc) 05:58:05 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x0) syz_clone3(&(0x7f00000001c0)={0x908000, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x39}, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/42, &(0x7f0000000240)=[r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2], 0x5, {r0}}, 0x58) ioprio_set$pid(0x2, r3, 0x6000) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:05 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x9, 0xa, 0x9) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4, 0x1f, 0x7, 0x4, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_spirange={0x2, 0x10, 0x4d5, 0x4d3}]}, 0x20}}, 0x4040014) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socket(0x9, 0xa, 0x9) (async) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4, 0x1f, 0x7, 0x4, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_spirange={0x2, 0x10, 0x4d5, 0x4d3}]}, 0x20}}, 0x4040014) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) (async) 05:58:05 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x67}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x67}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) 05:58:05 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x3db401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:05 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x9, 0xa, 0x9) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4, 0x1f, 0x7, 0x4, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_spirange={0x2, 0x10, 0x4d5, 0x4d3}]}, 0x20}}, 0x4040014) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 05:58:05 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x0) syz_clone3(&(0x7f00000001c0)={0x908000, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x39}, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/42, &(0x7f0000000240)=[r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2], 0x5, {r0}}, 0x58) ioprio_set$pid(0x2, r3, 0x6000) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:05 executing program 0: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="46d686ee", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250400000008000200080000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44001) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001640)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000016c0)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001440)=r4, 0x1) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000001d80)=ANY=[@ANYBLOB="eeffffffb88f19aa24bbea12b2fedb3dce98adaf9cf21abf6d1a6751a859551d77fb37490962e882693736f4b3a6c46206a1", @ANYBLOB="0e559ce0985d7bde66658361abd1ad39ab34a3a9900f2b9e9106d1ae3f2839a00c22b15b06565027c99d1d910e2587d5940b21d46a7a52b53c6bed05abd24ce52745f4e533cb0b4eb2a09bd79295df00da70710360617f44302a7ccc936f4b8cc29db845d03cde9a9aa891beee038bc697b4b30f829b4c8242b8a1254832a82aca46a8d062", @ANYBLOB="00042cbd7000fbdbdf256a00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x20000051}, 0x40048c5) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000001600)={0xc, 0x8, 0xfa00, {&(0x7f0000001480)}}, 0x10) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) io_uring_setup(0x31e6, &(0x7f0000000200)={0x0, 0x89ee, 0x16, 0x4, 0x1fb}) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 05:58:05 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x800, 0xe9cfb1f7656505ba) 05:58:05 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x3db401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:05 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 05:58:05 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x0) syz_clone3(&(0x7f00000001c0)={0x908000, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x39}, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/42, &(0x7f0000000240)=[r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2], 0x5, {r0}}, 0x58) ioprio_set$pid(0x2, r3, 0x6000) 05:58:05 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r6, 0x8}}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100)={0x62}, 0x1) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:05 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) 05:58:05 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 05:58:05 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x800, 0xe9cfb1f7656505ba) 05:58:05 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x3db401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:05 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) ptrace$cont(0x7, r1, 0x0, 0x0) getpgrp(0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x6000) 05:58:05 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 05:58:06 executing program 0: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="46d686ee", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250400000008000200080000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44001) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001640)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000016c0)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001440)=r4, 0x1) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000001d80)=ANY=[@ANYBLOB="eeffffffb88f19aa24bbea12b2fedb3dce98adaf9cf21abf6d1a6751a859551d77fb37490962e882693736f4b3a6c46206a1", @ANYBLOB="0e559ce0985d7bde66658361abd1ad39ab34a3a9900f2b9e9106d1ae3f2839a00c22b15b06565027c99d1d910e2587d5940b21d46a7a52b53c6bed05abd24ce52745f4e533cb0b4eb2a09bd79295df00da70710360617f44302a7ccc936f4b8cc29db845d03cde9a9aa891beee038bc697b4b30f829b4c8242b8a1254832a82aca46a8d062", @ANYBLOB="00042cbd7000fbdbdf256a00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990020000000580000000500d2000c0000000500d208010000000500d2000700eb000500d202000000000500d200a360f981fd080000000a0006000802118a2118de95c0c33bb4eb2389513a2d8394a2bf8b1595b53651112162ad219a5f95e5cd7148629ede6c33c409b636b0ad43cbaa5a7ae19e72a30f30cdfa73130b11f99d6573ca0149f13baf22d799576575ab8afa52c88662405e12b3adc003f1c74473bc580e674eb2aaba82f58746a82f73630567b31721b0867d58070bc2fa6c6fe7e28d068fe010cd4c5b66c8322dc952a70f36c4e3590d25d4c2cebdd3014c95223495ea996f30186a1a493de27b5aecad8b26efe9b77a0585c53811bc3d788f918f1ac4643906aef3865b62dacd60387ec9f75c8b862b8277e3cf5c0dca6670ba747bdd8c1c73fec3c2a4bb51ef754845418f3b626610cceeec02ebe4685d59382f4217b2f70afac9149fb5bf09f316b96edd234b93132db958b7ba0a73cb5c22b8f04275bc45e60c10347104c461bd43663aaf1194bd2d0a9ac95eef674795f3920812f3fc547f05a5499f1943cda46b4d18cb0f9b1a5c3e43aa4c36cd1337b3bc81336de5f4f3e781603246b1f36f5999682aec9c93631cc0fc3b33ee6a9c99cb7bcaf6ae7985883c700f7ac821f371c9138c3730ea7c303bc273885d263d31681319514eedbeffa0fa0fb515bbe1ac4a4522b8e2921b2beec480fa4da30e99aa289513fe569f90891c035ac7ae2af7cb4247b632c4b1611189db22db8bf01c1078dc21f5f9479562cd2e778aa46042c1"], 0x5c}, 0x1, 0x0, 0x0, 0x20000051}, 0x40048c5) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000001600)={0xc, 0x8, 0xfa00, {&(0x7f0000001480)}}, 0x10) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) io_uring_setup(0x31e6, &(0x7f0000000200)={0x0, 0x89ee, 0x16, 0x4, 0x1fb}) 05:58:06 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x80000) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:06 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x800, 0xe9cfb1f7656505ba) 05:58:06 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x511440, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r5) pidfd_getfd(r4, r5, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x6611, @private1, 0x1}, {0xa, 0x4e20, 0xe2b, @rand_addr=' \x01\x00', 0x1f}, 0xffffffffffffffff, 0x5}}, 0x48) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r3) pidfd_getfd(r1, r3, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000000000000, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0xff73) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r8}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r8, 0xd0fda285a1c08eaa, 0x0, @in={0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x90) 05:58:06 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) ptrace$cont(0x7, r1, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) 05:58:06 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r6, 0x8}}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100)={0x62}, 0x1) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:06 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x80000) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x80000) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) 05:58:06 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) getpgrp(0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x6000) 05:58:06 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x511440, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r5) pidfd_getfd(r4, r5, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x6611, @private1, 0x1}, {0xa, 0x4e20, 0xe2b, @rand_addr=' \x01\x00', 0x1f}, 0xffffffffffffffff, 0x5}}, 0x48) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r3) pidfd_getfd(r1, r3, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000000000000, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0xff73) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r8}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r8, 0xd0fda285a1c08eaa, 0x0, @in={0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x90) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x511440, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r5) (async) pidfd_getfd(r4, r5, 0x0) (async) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8}, 0x10) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x6611, @private1, 0x1}, {0xa, 0x4e20, 0xe2b, @rand_addr=' \x01\x00', 0x1f}, 0xffffffffffffffff, 0x5}}, 0x48) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r3) (async) pidfd_getfd(r1, r3, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000000000000, &(0x7f0000000100), 0x106}}, 0xff73) (async) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r8}}, 0x10) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r8, 0xd0fda285a1c08eaa, 0x0, @in={0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x90) (async) 05:58:06 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x5, 0x44741) 05:58:06 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x80000) (async, rerun: 64) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (rerun: 64) 05:58:06 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) 05:58:07 executing program 0: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="46d686ee", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250400000008000200080000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44001) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001640)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000016c0)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001440)=r4, 0x1) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000001d80)=ANY=[@ANYBLOB="eeffffffb88f19aa24bbea12b2fedb3dce98adaf9cf21abf6d1a6751a859551d77fb37490962e882693736f4b3a6c46206a1", @ANYBLOB="0e559ce0985d7bde66658361abd1ad39ab34a3a9900f2b9e9106d1ae3f2839a00c22b15b06565027c99d1d910e2587d5940b21d46a7a52b53c6bed05abd24ce52745f4e533cb0b4eb2a09bd79295df00da70710360617f44302a7ccc936f4b8cc29db845d03cde9a9aa891beee038bc697b4b30f829b4c8242b8a1254832a82aca46a8d062", @ANYBLOB="00042cbd7000fbdbdf256a00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x20000051}, 0x40048c5) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000001600)={0xc, 0x8, 0xfa00, {&(0x7f0000001480)}}, 0x10) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) 05:58:07 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x5, 0x44741) 05:58:07 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x511440, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r5) pidfd_getfd(r4, r5, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x6611, @private1, 0x1}, {0xa, 0x4e20, 0xe2b, @rand_addr=' \x01\x00', 0x1f}, 0xffffffffffffffff, 0x5}}, 0x48) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r3) pidfd_getfd(r1, r3, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000000000000, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0xff73) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r8}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r8, 0xd0fda285a1c08eaa, 0x0, @in={0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x90) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x511440, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r5) (async) pidfd_getfd(r4, r5, 0x0) (async) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8}, 0x10) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x6611, @private1, 0x1}, {0xa, 0x4e20, 0xe2b, @rand_addr=' \x01\x00', 0x1f}, 0xffffffffffffffff, 0x5}}, 0x48) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r3) (async) pidfd_getfd(r1, r3, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000000000000, &(0x7f0000000100), 0x106}}, 0xff73) (async) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r8}}, 0x10) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r8, 0xd0fda285a1c08eaa, 0x0, @in={0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x90) (async) 05:58:07 executing program 5: r0 = socket(0x2a, 0x2, 0x2) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@private0}, &(0x7f0000000100)=0x14) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r3 = socket(0x28, 0x80000, 0x7f) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="020027bd7000fddbdf2503000000050006000800000041ce11e01af790ff2928c1"], 0x1c}}, 0x20004085) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r2) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) 05:58:07 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) 05:58:07 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r6, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:07 executing program 1: ioprio_set$pid(0x2, 0x0, 0x6000) 05:58:07 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x5, 0x44741) 05:58:07 executing program 2: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@remote, 0x0}, &(0x7f0000000140)=0x14) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="186900000c00000000000000890000003d21b8f50100200000000036d4b35fdf60ef8924b3d3fcd7145e30d4336012ded708e4b19946889a21d0ac5765e3fe73a4caa16356d8ddc78b43c6e85164521e6aaf5d143e8272c31455ef68fd397834903bbc005e1390f85eebdf3631b2da04a9f78559"], &(0x7f0000000040)='GPL\x00', 0x4, 0x10, &(0x7f0000000080)=""/16, 0x41000, 0x0, '\x00', r0, 0x1a, r1, 0x8, &(0x7f00000001c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x6ec}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[r2, 0xffffffffffffffff, r3, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) accept4$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x0, @fixed}, &(0x7f0000000340)=0xe, 0x80800) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000400)={0x6, 0x118, 0xfa00, {{0x800, 0xff, "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", 0x0, 0xff, 0x3e, 0x9, 0x6, 0x24, 0x7f}, r6}}, 0x120) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r7, 0x0) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) 05:58:07 executing program 5: r0 = socket(0x2a, 0x2, 0x2) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@private0}, &(0x7f0000000100)=0x14) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) (async, rerun: 32) r3 = socket(0x28, 0x80000, 0x7f) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="020027bd7000fddbdf2503000000050006000800000041ce11e01af790ff2928c1"], 0x1c}}, 0x20004085) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r2) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) [ 657.134848][ T24] audit: type=1400 audit(1653544687.654:199): avc: denied { getopt } for pid=20326 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 05:58:07 executing program 5: r0 = socket(0x2a, 0x2, 0x2) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@private0}, &(0x7f0000000100)=0x14) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r3 = socket(0x28, 0x80000, 0x7f) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="020027bd7000fddbdf2503000000050006000800000041ce11e01af790ff2928c1"], 0x1c}}, 0x20004085) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r2) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) 05:58:07 executing program 1: ioprio_set$pid(0x0, 0x0, 0x6000) 05:58:08 executing program 0: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="46d686ee", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250400000008000200080000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44001) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001640)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000016c0)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001440)=r4, 0x1) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000001d80)=ANY=[@ANYBLOB="eeffffffb88f19aa24bbea12b2fedb3dce98adaf9cf21abf6d1a6751a859551d77fb37490962e882693736f4b3a6c46206a1", @ANYBLOB="0e559ce0985d7bde66658361abd1ad39ab34a3a9900f2b9e9106d1ae3f2839a00c22b15b06565027c99d1d910e2587d5940b21d46a7a52b53c6bed05abd24ce52745f4e533cb0b4eb2a09bd79295df00da70710360617f44302a7ccc936f4b8cc29db845d03cde9a9aa891beee038bc697b4b30f829b4c8242b8a1254832a82aca46a8d062", @ANYBLOB="00042cbd7000fbdbdf256a00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x20000051}, 0x40048c5) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) 05:58:08 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x3fff, 0x105741) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000005c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f00000000c0)={0x3cc, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x28}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x6b, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4}, @device_a, @broadcast, @random="495dd99f33a8", {0x3, 0x6}}, @ver_80211n={0x0, 0x0, 0x3, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x1, 0x1, 0x38, @void, [{0xdd, 0x43, "efdff6774365ea287dd6ca26679b77bfdb95a82e59801d8beb9efd8b6dc9430b86fe4c866441d0d0be4c9c9c0c39f4e4b77e15f90e633a0f7076a88e1896ae15c8c568"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x312, 0x33, @data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x8}, @initial, @device_b, @device_a, {0x8, 0x1fc}}, {0x2, 0x1, 0x3, 0x0, 0xc6}}, {@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x6}, @broadcast, @device_a, @random="6cd089270bf9", {0x9, 0x3}}, {0xa, 0x0, 0x2, 0x1, 0xff}}}, @ver_80211n={0x0, 0x6d7a, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, @random="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"}}]}, 0x3cc}}, 0x4000050) 05:58:08 executing program 2: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@remote, 0x0}, &(0x7f0000000140)=0x14) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="186900000c00000000000000890000003d21b8f50100200000000036d4b35fdf60ef8924b3d3fcd7145e30d4336012ded708e4b19946889a21d0ac5765e3fe73a4caa16356d8ddc78b43c6e85164521e6aaf5d143e8272c31455ef68fd397834903bbc005e1390f85eebdf3631b2da04a9f78559"], &(0x7f0000000040)='GPL\x00', 0x4, 0x10, &(0x7f0000000080)=""/16, 0x41000, 0x0, '\x00', r0, 0x1a, r1, 0x8, &(0x7f00000001c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x6ec}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[r2, 0xffffffffffffffff, r3, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) accept4$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x0, @fixed}, &(0x7f0000000340)=0xe, 0x80800) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000400)={0x6, 0x118, 0xfa00, {{0x800, 0xff, "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", 0x0, 0xff, 0x3e, 0x9, 0x6, 0x24, 0x7f}, r6}}, 0x120) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r7, 0x0) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@remote}, &(0x7f0000000140)=0x14) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r3, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="186900000c00000000000000890000003d21b8f50100200000000036d4b35fdf60ef8924b3d3fcd7145e30d4336012ded708e4b19946889a21d0ac5765e3fe73a4caa16356d8ddc78b43c6e85164521e6aaf5d143e8272c31455ef68fd397834903bbc005e1390f85eebdf3631b2da04a9f78559"], &(0x7f0000000040)='GPL\x00', 0x4, 0x10, &(0x7f0000000080)=""/16, 0x41000, 0x0, '\x00', r0, 0x1a, r1, 0x8, &(0x7f00000001c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x6ec}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[r2, 0xffffffffffffffff, r3, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) accept4$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x0, @fixed}, &(0x7f0000000340)=0xe, 0x80800) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) (async) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000400)={0x6, 0x118, 0xfa00, {{0x800, 0xff, "70b8faf252c5d2ac59aca197ee3f8ea168ddf149e5d60565513b526606264782bea3167dfe71f3380b646a38bc20c88ddab92609c8f0e20f39d7871f655e61127973e666e203a2ad176aa8653ed523c64c15ad4546edb978051b4f85972a2d06b0c3d2c64a24f5fb23d784405ad4cd1e1eb86233f4249826245ef16784714c6f05694e55b3d0ad14ccf5ae67deb1ce19b7d4bccaf4f3bf76096a00d36587edc0550d41c78d37368d4c2ed14cdb34831de10a82b60addd6d3d520f5193282aa997dc1342700b47a42c512212a06a5a53ad91f13d410af9501e4836e80ef87d6a0940391b02cb01ee8a33415d2051f0b3746f8939d039080e329ff16ef3beb5931", 0x0, 0xff, 0x3e, 0x9, 0x6, 0x24, 0x7f}, r6}}, 0x120) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r7, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) (async) 05:58:08 executing program 1: ioprio_set$pid(0x0, 0x0, 0x6000) 05:58:08 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) recvmsg$can_j1939(r0, &(0x7f0000002580)={&(0x7f0000000080)=@alg, 0x80, &(0x7f0000002480)=[{&(0x7f0000000100)}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/138, 0x8a}, {&(0x7f0000001200)=""/218, 0xda}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/28, 0x1c}, {&(0x7f0000002340)=""/225, 0xe1}, {&(0x7f0000002440)=""/6, 0x6}], 0x8, &(0x7f0000002500)=""/103, 0x67}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:08 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r6, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:08 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x3fff, 0x105741) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000005c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f00000000c0)={0x3cc, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x28}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x6b, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4}, @device_a, @broadcast, @random="495dd99f33a8", {0x3, 0x6}}, @ver_80211n={0x0, 0x0, 0x3, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x1, 0x1, 0x38, @void, [{0xdd, 0x43, "efdff6774365ea287dd6ca26679b77bfdb95a82e59801d8beb9efd8b6dc9430b86fe4c866441d0d0be4c9c9c0c39f4e4b77e15f90e633a0f7076a88e1896ae15c8c568"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x312, 0x33, @data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x8}, @initial, @device_b, @device_a, {0x8, 0x1fc}}, {0x2, 0x1, 0x3, 0x0, 0xc6}}, {@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x6}, @broadcast, @device_a, @random="6cd089270bf9", {0x9, 0x3}}, {0xa, 0x0, 0x2, 0x1, 0xff}}}, @ver_80211n={0x0, 0x6d7a, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, @random="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"}}]}, 0x3cc}}, 0x4000050) 05:58:08 executing program 1: ioprio_set$pid(0x0, 0x0, 0x6000) 05:58:08 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) recvmsg$can_j1939(r0, &(0x7f0000002580)={&(0x7f0000000080)=@alg, 0x80, &(0x7f0000002480)=[{&(0x7f0000000100)}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/138, 0x8a}, {&(0x7f0000001200)=""/218, 0xda}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/28, 0x1c}, {&(0x7f0000002340)=""/225, 0xe1}, {&(0x7f0000002440)=""/6, 0x6}], 0x8, &(0x7f0000002500)=""/103, 0x67}, 0x20) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:08 executing program 0: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="46d686ee", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250400000008000200080000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44001) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001640)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000016c0)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001440)=r4, 0x1) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000001d80)=ANY=[@ANYBLOB="eeffffffb88f19aa24bbea12b2fedb3dce98adaf9cf21abf6d1a6751a859551d77fb37490962e882693736f4b3a6c46206a1", @ANYBLOB="0e559ce0985d7bde66658361abd1ad39ab34a3a9900f2b9e9106d1ae3f2839a00c22b15b06565027c99d1d910e2587d5940b21d46a7a52b53c6bed05abd24ce52745f4e533cb0b4eb2a09bd79295df00da70710360617f44302a7ccc936f4b8cc29db845d03cde9a9aa891beee038bc697b4b30f829b4c8242b8a1254832a82aca46a8d062", @ANYBLOB="00042cbd7000fbdbdf256a00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x20000051}, 0x40048c5) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) 05:58:08 executing program 2: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@remote, 0x0}, &(0x7f0000000140)=0x14) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="186900000c00000000000000890000003d21b8f50100200000000036d4b35fdf60ef8924b3d3fcd7145e30d4336012ded708e4b19946889a21d0ac5765e3fe73a4caa16356d8ddc78b43c6e85164521e6aaf5d143e8272c31455ef68fd397834903bbc005e1390f85eebdf3631b2da04a9f78559"], &(0x7f0000000040)='GPL\x00', 0x4, 0x10, &(0x7f0000000080)=""/16, 0x41000, 0x0, '\x00', r0, 0x1a, r1, 0x8, &(0x7f00000001c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x6ec}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[r2, 0xffffffffffffffff, r3, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) accept4$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x0, @fixed}, &(0x7f0000000340)=0xe, 0x80800) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) (async) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000400)={0x6, 0x118, 0xfa00, {{0x800, 0xff, "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", 0x0, 0xff, 0x3e, 0x9, 0x6, 0x24, 0x7f}, r6}}, 0x120) (async) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r7, 0x0) (async) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) 05:58:08 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x3fff, 0x105741) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000005c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f00000000c0)={0x3cc, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x28}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x6b, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4}, @device_a, @broadcast, @random="495dd99f33a8", {0x3, 0x6}}, @ver_80211n={0x0, 0x0, 0x3, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x1, 0x1, 0x38, @void, [{0xdd, 0x43, "efdff6774365ea287dd6ca26679b77bfdb95a82e59801d8beb9efd8b6dc9430b86fe4c866441d0d0be4c9c9c0c39f4e4b77e15f90e633a0f7076a88e1896ae15c8c568"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x312, 0x33, @data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x8}, @initial, @device_b, @device_a, {0x8, 0x1fc}}, {0x2, 0x1, 0x3, 0x0, 0xc6}}, {@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x6}, @broadcast, @device_a, @random="6cd089270bf9", {0x9, 0x3}}, {0xa, 0x0, 0x2, 0x1, 0xff}}}, @ver_80211n={0x0, 0x6d7a, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, @random="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"}}]}, 0x3cc}}, 0x4000050) 05:58:08 executing program 1: ioprio_set$pid(0x2, 0x0, 0x0) 05:58:08 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) recvmsg$can_j1939(r0, &(0x7f0000002580)={&(0x7f0000000080)=@alg, 0x80, &(0x7f0000002480)=[{&(0x7f0000000100)}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/138, 0x8a}, {&(0x7f0000001200)=""/218, 0xda}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/28, 0x1c}, {&(0x7f0000002340)=""/225, 0xe1}, {&(0x7f0000002440)=""/6, 0x6}], 0x8, &(0x7f0000002500)=""/103, 0x67}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:08 executing program 0: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="46d686ee", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250400000008000200080000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44001) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001640)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000016c0)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001440)=r4, 0x1) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000001d80)=ANY=[@ANYBLOB="eeffffffb88f19aa24bbea12b2fedb3dce98adaf9cf21abf6d1a6751a859551d77fb37490962e882693736f4b3a6c46206a1", @ANYBLOB="0e559ce0985d7bde66658361abd1ad39ab34a3a9900f2b9e9106d1ae3f2839a00c22b15b06565027c99d1d910e2587d5940b21d46a7a52b53c6bed05abd24ce52745f4e533cb0b4eb2a09bd79295df00da70710360617f44302a7ccc936f4b8cc29db845d03cde9a9aa891beee038bc697b4b30f829b4c8242b8a1254832a82aca46a8d062", @ANYBLOB="00042cbd7000fbdbdf256a00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x20000051}, 0x40048c5) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) 05:58:08 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000600}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44850}, 0x1) 05:58:08 executing program 1: ioprio_set$pid(0x2, 0x0, 0x0) 05:58:08 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:08 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x401, 0x4591, 0xd2b, 0x100, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x3, 0x5, 0x3}, 0x48) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x5ea4406a, 0x80800) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0x3, {0x1, 0x0, 0x1}, {0x1, 0xf0, 0xb}, 0x1, 0xfd}, {0x3, 0x1, {0x1, 0x1, 0x1}, {0x2, 0xf0, 0x2}, 0xfe, 0x1}, {0x2, 0x1, {0x2, 0x0, 0x4}, {0x1, 0xff, 0x1}, 0x1, 0x1}, {0x1, 0x0, {0x0, 0xf0, 0x1}, {0x1, 0x1, 0x2}, 0x7f}, {0x2, 0x2, {0x0, 0x0, 0x3}, {0x0, 0x1, 0x4}, 0x2, 0x2}, {0x1, 0x2, {0x1, 0x0, 0x2}, {0x1, 0xff, 0x2}, 0xfd}], 0xc0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 05:58:08 executing program 0: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="46d686ee", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250400000008000200080000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44001) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001640)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000016c0)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001440)=r4, 0x1) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) 05:58:08 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@ipv4={""/10, ""/2, @local}, 0x0}, &(0x7f00000000c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x14, 0x8, 0x5, 0x1000, 0x1a01, r0, 0x1c, '\x00', r1, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x48) 05:58:08 executing program 1: ioprio_set$pid(0x2, 0x0, 0x0) 05:58:08 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r1) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000600}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44850}, 0x1) 05:58:08 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x401, 0x4591, 0xd2b, 0x100, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x3, 0x5, 0x3}, 0x48) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x5ea4406a, 0x80800) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0x3, {0x1, 0x0, 0x1}, {0x1, 0xf0, 0xb}, 0x1, 0xfd}, {0x3, 0x1, {0x1, 0x1, 0x1}, {0x2, 0xf0, 0x2}, 0xfe, 0x1}, {0x2, 0x1, {0x2, 0x0, 0x4}, {0x1, 0xff, 0x1}, 0x1, 0x1}, {0x1, 0x0, {0x0, 0xf0, 0x1}, {0x1, 0x1, 0x2}, 0x7f}, {0x2, 0x2, {0x0, 0x0, 0x3}, {0x0, 0x1, 0x4}, 0x2, 0x2}, {0x1, 0x2, {0x1, 0x0, 0x2}, {0x1, 0xff, 0x2}, 0xfd}], 0xc0) (async, rerun: 64) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (rerun: 64) 05:58:08 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@ipv4={""/10, ""/2, @local}, 0x0}, &(0x7f00000000c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x14, 0x8, 0x5, 0x1000, 0x1a01, r0, 0x1c, '\x00', r1, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x48) 05:58:08 executing program 0: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="46d686ee", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250400000008000200080000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44001) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001640)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000016c0)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) 05:58:08 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r6, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:08 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000600}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44850}, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r1) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000600}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44850}, 0x1) (async) 05:58:08 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@ipv4={""/10, ""/2, @local}, 0x0}, &(0x7f00000000c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x14, 0x8, 0x5, 0x1000, 0x1a01, r0, 0x1c, '\x00', r1, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x48) 05:58:08 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:08 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x401, 0x4591, 0xd2b, 0x100, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x3, 0x5, 0x3}, 0x48) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x5ea4406a, 0x80800) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0x3, {0x1, 0x0, 0x1}, {0x1, 0xf0, 0xb}, 0x1, 0xfd}, {0x3, 0x1, {0x1, 0x1, 0x1}, {0x2, 0xf0, 0x2}, 0xfe, 0x1}, {0x2, 0x1, {0x2, 0x0, 0x4}, {0x1, 0xff, 0x1}, 0x1, 0x1}, {0x1, 0x0, {0x0, 0xf0, 0x1}, {0x1, 0x1, 0x2}, 0x7f}, {0x2, 0x2, {0x0, 0x0, 0x3}, {0x0, 0x1, 0x4}, 0x2, 0x2}, {0x1, 0x2, {0x1, 0x0, 0x2}, {0x1, 0xff, 0x2}, 0xfd}], 0xc0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 05:58:08 executing program 0: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="46d686ee", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250400000008000200080000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44001) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001640)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000016c0)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) 05:58:08 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x9, @media='eth\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x80) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 05:58:08 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 05:58:08 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x9, @media='eth\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x80) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 05:58:08 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 05:58:08 executing program 0: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="46d686ee", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250400000008000200080000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44001) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001640)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000016c0)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) 05:58:08 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80500000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00B', @ANYRES16=0x0, @ANYBLOB="000428bd7000ffdbdf258600000008000300", @ANYRES32=0x0, @ANYBLOB="080026000217000008002201f4000000080027000000000008002700020000000800260090160000"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x20000080) 05:58:08 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 05:58:08 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r6, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:08 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80500000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00B', @ANYRES16=0x0, @ANYBLOB="000428bd7000ffdbdf258600000008000300", @ANYRES32=0x0, @ANYBLOB="080026000217000008002201f4000000080027000000000008002700020000000800260090160000"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x20000080) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80500000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00B', @ANYRES16=0x0, @ANYBLOB="000428bd7000ffdbdf258600000008000300", @ANYRES32=0x0, @ANYBLOB="080026000217000008002201f4000000080027000000000008002700020000000800260090160000"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x20000080) (async) 05:58:08 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80500000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00B', @ANYRES16=0x0, @ANYBLOB="000428bd7000ffdbdf258600000008000300", @ANYRES32=0x0, @ANYBLOB="080026000217000008002201f4000000080027000000000008002700020000000800260090160000"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x20000080) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80500000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00B', @ANYRES16=0x0, @ANYBLOB="000428bd7000ffdbdf258600000008000300", @ANYRES32=0x0, @ANYBLOB="080026000217000008002201f4000000080027000000000008002700020000000800260090160000"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x20000080) (async) 05:58:08 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x9, @media='eth\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x80) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 05:58:08 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:08 executing program 0: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="46d686ee", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250400000008000200080000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44001) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001640)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000016c0)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) 05:58:08 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048011) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0xc0040) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r3, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r3, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x95, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4048000) 05:58:08 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r2, 0x4}}, 0x18) 05:58:08 executing program 0: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="46d686ee", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250400000008000200080000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44001) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001640), 0x111, 0x3}}, 0x20) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) 05:58:09 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048011) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0xc0040) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r3, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r3, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x95, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4048000) 05:58:09 executing program 0: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="46d686ee", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250400000008000200080000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44001) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) 05:58:09 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) eventfd(0xf5) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket(0x15, 0x6, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x20) 05:58:09 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r6, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:09 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async, rerun: 32) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r2, 0x4}}, 0x18) 05:58:09 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048011) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0xc0040) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r3, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r3, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x95, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4048000) openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048011) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0xc0040) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r3, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r3, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x95, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4048000) (async) 05:58:09 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) eventfd(0xf5) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket(0x15, 0x6, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x20) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) eventfd(0xf5) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket(0x15, 0x6, 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x20) (async) 05:58:09 executing program 0: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="46d686ee", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250400000008000200080000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44001) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) 05:58:09 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r5, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:09 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r2, 0x4}}, 0x18) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x3}}, 0x20) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r2, 0x4}}, 0x18) (async) 05:58:09 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:09 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) eventfd(0xf5) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) r0 = socket(0x15, 0x6, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x20) 05:58:09 executing program 0: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="46d686ee", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250400000008000200080000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44001) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) 05:58:09 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@exit, @call={0x85, 0x0, 0x0, 0x4a}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}]}, &(0x7f0000000100)='syzkaller\x00', 0x4f, 0xad, &(0x7f0000000140)=""/173, 0x41000, 0x1, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000200)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xf, 0xd57, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r2, r0, r3, r4, r0, r0, r0]}, 0x80) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:09 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x20040000) 05:58:09 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x20040000) 05:58:09 executing program 0: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="46d686ee", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250400000008000200080000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44001) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) 05:58:09 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r5, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:09 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@exit, @call={0x85, 0x0, 0x0, 0x4a}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}]}, &(0x7f0000000100)='syzkaller\x00', 0x4f, 0xad, &(0x7f0000000140)=""/173, 0x41000, 0x1, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000200)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xf, 0xd57, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r2, r0, r3, r4, r0, r0, r0]}, 0x80) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r3, 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@exit, @call={0x85, 0x0, 0x0, 0x4a}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}]}, &(0x7f0000000100)='syzkaller\x00', 0x4f, 0xad, &(0x7f0000000140)=""/173, 0x41000, 0x1, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000200)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xf, 0xd57, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r2, r0, r3, r4, r0, r0, r0]}, 0x80) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) 05:58:09 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:09 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x20040000) 05:58:09 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:09 executing program 0: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) 05:58:09 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@exit, @call={0x85, 0x0, 0x0, 0x4a}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}]}, &(0x7f0000000100)='syzkaller\x00', 0x4f, 0xad, &(0x7f0000000140)=""/173, 0x41000, 0x1, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000200)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xf, 0xd57, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r2, r0, r3, r4, r0, r0, r0]}, 0x80) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r3, 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@exit, @call={0x85, 0x0, 0x0, 0x4a}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}]}, &(0x7f0000000100)='syzkaller\x00', 0x4f, 0xad, &(0x7f0000000140)=""/173, 0x41000, 0x1, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000200)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xf, 0xd57, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r2, r0, r3, r4, r0, r0, r0]}, 0x80) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) 05:58:09 executing program 0: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) 05:58:09 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 05:58:09 executing program 5: r0 = socket(0x26, 0x80000, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x40040, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000002c0)={0xa, 0x4}, 0xc) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x80) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x6}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x880) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) r6 = syz_open_dev$vcsn(&(0x7f00000001c0), 0xd2af, 0x40) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4008000}, 0x20040044) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) eventfd(0x8000) 05:58:09 executing program 0: pidfd_open(0xffffffffffffffff, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000) 05:58:09 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r5, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:09 executing program 0: pidfd_open(0xffffffffffffffff, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000) 05:58:09 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 05:58:09 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:09 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:09 executing program 5: r0 = socket(0x26, 0x80000, 0x6) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x40040, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000002c0)={0xa, 0x4}, 0xc) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x80) (async) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x6}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x880) (async, rerun: 64) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x1) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) r6 = syz_open_dev$vcsn(&(0x7f00000001c0), 0xd2af, 0x40) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4008000}, 0x20040044) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) eventfd(0x8000) 05:58:09 executing program 0: pidfd_open(0xffffffffffffffff, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000) 05:58:09 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 05:58:09 executing program 5: r0 = socket(0x26, 0x80000, 0x6) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) (async, rerun: 32) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x40040, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000002c0)={0xa, 0x4}, 0xc) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) (async, rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x80) (async, rerun: 64) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x6}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x880) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x1) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (async) r6 = syz_open_dev$vcsn(&(0x7f00000001c0), 0xd2af, 0x40) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4008000}, 0x20040044) (async, rerun: 64) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async, rerun: 64) eventfd(0x8000) 05:58:09 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) 05:58:09 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r2, 0x9, "2b37f2", "4e02c99880a19c20a8c0666e1bdff7b71b344462666c204bf51e90fc338a68f204ea2b9b25f4872ec120d1f686d27441668e93d02519090ada38f249353f674d1ba965d0486c3e5811729f6255545cc4b966a541dc95adfeb649d524a9c6654d856a0ab9d769dd5deaa43995b4094320abfba21090002917b237788787efcb82311a9bd6ecc08c00e9bf4357adf8e2ccaf3dff396d650dc25aa65f4cabc33355f878497f6fd917721a7ee45bfb07d0fc617a036ca59a55d6da052bf3d13b84ee47681471c550ffaa4da8e5378d6f7130d08cda9ae6a564415009da4b9853bb2463d69e5dc8c4dd4c3924b91a342439aa24d28767282998ef823730a52f953f50"}}, 0x110) 05:58:09 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) syz_open_dev$vcsn(&(0x7f0000000080), 0x4, 0x20001) syz_clone3(&(0x7f0000001200)={0x2000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x14}, &(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001180)=""/56, &(0x7f00000011c0)=[0x0, 0xffffffffffffffff], 0x2, {r0}}, 0x58) socket$xdp(0x2c, 0x3, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:09 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r5, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:09 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) 05:58:09 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r2, 0x9, "2b37f2", "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"}}, 0x110) 05:58:09 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) syz_open_dev$vcsn(&(0x7f0000000080), 0x4, 0x20001) syz_clone3(&(0x7f0000001200)={0x2000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x14}, &(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001180)=""/56, &(0x7f00000011c0)=[0x0, 0xffffffffffffffff], 0x2, {r0}}, 0x58) socket$xdp(0x2c, 0x3, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x4, 0x20001) (async) syz_clone3(&(0x7f0000001200)={0x2000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x14}, &(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001180)=""/56, &(0x7f00000011c0)=[0x0, 0xffffffffffffffff], 0x2, {r0}}, 0x58) (async) socket$xdp(0x2c, 0x3, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) 05:58:09 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:09 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:09 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r2, 0x9, "2b37f2", "4e02c99880a19c20a8c0666e1bdff7b71b344462666c204bf51e90fc338a68f204ea2b9b25f4872ec120d1f686d27441668e93d02519090ada38f249353f674d1ba965d0486c3e5811729f6255545cc4b966a541dc95adfeb649d524a9c6654d856a0ab9d769dd5deaa43995b4094320abfba21090002917b237788787efcb82311a9bd6ecc08c00e9bf4357adf8e2ccaf3dff396d650dc25aa65f4cabc33355f878497f6fd917721a7ee45bfb07d0fc617a036ca59a55d6da052bf3d13b84ee47681471c550ffaa4da8e5378d6f7130d08cda9ae6a564415009da4b9853bb2463d69e5dc8c4dd4c3924b91a342439aa24d28767282998ef823730a52f953f50"}}, 0x110) 05:58:09 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) syz_open_dev$vcsn(&(0x7f0000000080), 0x4, 0x20001) syz_clone3(&(0x7f0000001200)={0x2000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x14}, &(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001180)=""/56, &(0x7f00000011c0)=[0x0, 0xffffffffffffffff], 0x2, {r0}}, 0x58) socket$xdp(0x2c, 0x3, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x4, 0x20001) (async) syz_clone3(&(0x7f0000001200)={0x2000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x14}, &(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001180)=""/56, &(0x7f00000011c0)=[0x0, 0xffffffffffffffff], 0x2, {r0}}, 0x58) (async) socket$xdp(0x2c, 0x3, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) 05:58:09 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) 05:58:09 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x8100) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x7fff, 0x900) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x202000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r3) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x480000, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x40080) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4090}, 0xc4) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x5}, [@map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2039}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffff}]}, &(0x7f00000000c0)='GPL\x00', 0x100, 0x0, &(0x7f0000000100), 0x41000, 0x12, '\x00', 0x0, 0x1c, r0, 0x8, &(0x7f0000000180)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x45, 0xa, 0x8, 0x80}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000380)=[0x1, 0x1, r2, 0x1, r5]}, 0x80) eventfd2(0x0, 0x800) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) 05:58:09 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) 05:58:09 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x8100) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x7fff, 0x900) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x202000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r3) (async) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x480000, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x40080) (async, rerun: 32) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4090}, 0xc4) (async, rerun: 32) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x5}, [@map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2039}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffff}]}, &(0x7f00000000c0)='GPL\x00', 0x100, 0x0, &(0x7f0000000100), 0x41000, 0x12, '\x00', 0x0, 0x1c, r0, 0x8, &(0x7f0000000180)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x45, 0xa, 0x8, 0x80}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000380)=[0x1, 0x1, r2, 0x1, r5]}, 0x80) (async) eventfd2(0x0, 0x800) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) 05:58:10 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:10 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0xc) 05:58:10 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000) 05:58:10 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x8100) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x7fff, 0x900) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x202000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r3) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x480000, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x40080) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4090}, 0xc4) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x5}, [@map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2039}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffff}]}, &(0x7f00000000c0)='GPL\x00', 0x100, 0x0, &(0x7f0000000100), 0x41000, 0x12, '\x00', 0x0, 0x1c, r0, 0x8, &(0x7f0000000180)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x45, 0xa, 0x8, 0x80}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000380)=[0x1, 0x1, r2, 0x1, r5]}, 0x80) eventfd2(0x0, 0x800) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x8100) (async) syz_open_dev$vcsu(&(0x7f0000000200), 0x7fff, 0x900) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x202000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r3) (async) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x480000, 0x0) (async) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x40080) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4090}, 0xc4) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x5}, [@map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2039}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffff}]}, &(0x7f00000000c0)='GPL\x00', 0x100, 0x0, &(0x7f0000000100), 0x41000, 0x12, '\x00', 0x0, 0x1c, r0, 0x8, &(0x7f0000000180)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x45, 0xa, 0x8, 0x80}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000380)=[0x1, 0x1, r2, 0x1, r5]}, 0x80) (async) eventfd2(0x0, 0x800) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) 05:58:10 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:10 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:10 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000) 05:58:10 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0xc) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0xc) (async) 05:58:10 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x2802) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000001d80)={0x28, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x44, r1, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xfb}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xf}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) socket$inet6(0xa, 0x1, 0xb16e) 05:58:10 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000) 05:58:10 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0xc) 05:58:10 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x2802) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000001d80)={0x28, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x44, r1, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xfb}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xf}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) socket$inet6(0xa, 0x1, 0xb16e) 05:58:10 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:10 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 05:58:10 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x2802) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000001d80)={0x28, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x44, r1, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xfb}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xf}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) socket$inet6(0xa, 0x1, 0xb16e) 05:58:10 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000080)}}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) 05:58:10 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:10 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:10 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 05:58:10 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000080)}}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) 05:58:10 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x4741) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000429bd7000fedbdf255900000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900001000000e000002"], 0x28}, 0x1, 0x0, 0x0, 0x20040001}, 0x24000001) 05:58:10 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 05:58:10 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000080)}}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000080)}}, 0x10) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) 05:58:10 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x8100) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x7fff, 0x900) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x202000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r3) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x480000, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x40080) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4090}, 0xc4) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x5}, [@map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2039}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffff}]}, &(0x7f00000000c0)='GPL\x00', 0x100, 0x0, &(0x7f0000000100), 0x41000, 0x12, '\x00', 0x0, 0x1c, r0, 0x8, &(0x7f0000000180)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x45, 0xa, 0x8, 0x80}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000380)=[0x1, 0x1, r2, 0x1, r5]}, 0x80) eventfd2(0x0, 0x800) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) 05:58:10 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:10 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x4741) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000429bd7000fedbdf255900000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900001000000e000002"], 0x28}, 0x1, 0x0, 0x0, 0x20040001}, 0x24000001) 05:58:10 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xffffffffffffff52, &(0x7f0000000100)={&(0x7f0000000200)={0x28, 0x0, 0x8, 0x70bd28, 0x180000, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x48000) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r2 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r2) r3 = pidfd_getfd(r1, r0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r3) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r4, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80, 0x6dc}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c1}, 0x6400c850) 05:58:10 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) 05:58:10 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xffffffffffffff52, &(0x7f0000000100)={&(0x7f0000000200)={0x28, 0x0, 0x8, 0x70bd28, 0x180000, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x48000) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r2 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r2) r3 = pidfd_getfd(r1, r0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r3) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r4, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80, 0x6dc}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c1}, 0x6400c850) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) (async) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xffffffffffffff52, &(0x7f0000000100)={&(0x7f0000000200)={0x28, 0x0, 0x8, 0x70bd28, 0x180000, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x48000) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) socket(0x1a, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(0x0, r2) (async) pidfd_getfd(r1, r0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r3) (async) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r4, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80, 0x6dc}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) (async) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c1}, 0x6400c850) (async) 05:58:10 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x4741) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000429bd7000fedbdf255900000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900001000000e000002"], 0x28}, 0x1, 0x0, 0x0, 0x20040001}, 0x24000001) 05:58:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xffffffffffffff52, &(0x7f0000000100)={&(0x7f0000000200)={0x28, 0x0, 0x8, 0x70bd28, 0x180000, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x48000) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) r2 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r2) (async, rerun: 32) r3 = pidfd_getfd(r1, r0, 0x0) (rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) (async, rerun: 64) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r3) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r4, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80, 0x6dc}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) (async) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c1}, 0x6400c850) 05:58:10 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x44741) 05:58:10 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x541401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) [ 660.043499][T20775] selinux_netlink_send: 9 callbacks suppressed [ 660.043514][T20775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20775 comm=syz-executor.3 05:58:10 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x541401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:10 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) 05:58:10 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x44741) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x44741) (async) 05:58:10 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:10 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x541401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x541401) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) 05:58:10 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:10 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) 05:58:10 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) mmap$qrtrtun(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x1000002, 0x8010, r1, 0x7) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:10 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x44741) 05:58:10 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xcc, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x70}}}}, [@NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x0, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x7, 0x5}, {0xe0}, {0x3, 0x2}, {0x3, 0x4}, {0x0, 0x4}, {0xd9, 0x3}, {0x9, 0x5}, {0xff, 0x6}, {0xf8, 0x1}, {0x5}, {0x3f, 0x6}, {0x80, 0x4}, {0x1, 0x4}, {0xe2}, {0x0, 0x3}, {0x40}, {0x0, 0x3}, {0x1, 0x3}], "23005dc6f813ee44"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x1f, 0x6}, {0x6, 0x2}, {0xfc, 0x4}, {0x1, 0x5}, {0xfa, 0x5}, {0x81, 0x3}, {0x7, 0x1}, {0x0, 0x5}, {0x9}, {0x20, 0x6}, {0xfc, 0x2}, {0x3}, {0x1f}, {0x1, 0x7}, {0x2, 0x7}, {0x80, 0x3}], "b3ff264b7b96ee4a"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x20, 0x1}, {0x1f, 0x2}, {0x1, 0x6}, {0x2, 0x3}, {0x7}, {0xfa, 0x2}, {0x2, 0x3}, {0xfd, 0x5}, {0x5, 0x4}, {0x6, 0x3}, {0xcf, 0x4}, {0x12, 0x5}, {0xbd}, {0x20, 0x6}, {0xf0, 0x1}, {0x28, 0x7}, {0xe7, 0x4}], "4d9ce26b2542c127"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x0, 0x1}], "12adc580ea92cbff"}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 05:58:10 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) (async) mmap$qrtrtun(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x1000002, 0x8010, r1, 0x7) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:10 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xcc, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x70}}}}, [@NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x0, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x7, 0x5}, {0xe0}, {0x3, 0x2}, {0x3, 0x4}, {0x0, 0x4}, {0xd9, 0x3}, {0x9, 0x5}, {0xff, 0x6}, {0xf8, 0x1}, {0x5}, {0x3f, 0x6}, {0x80, 0x4}, {0x1, 0x4}, {0xe2}, {0x0, 0x3}, {0x40}, {0x0, 0x3}, {0x1, 0x3}], "23005dc6f813ee44"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x1f, 0x6}, {0x6, 0x2}, {0xfc, 0x4}, {0x1, 0x5}, {0xfa, 0x5}, {0x81, 0x3}, {0x7, 0x1}, {0x0, 0x5}, {0x9}, {0x20, 0x6}, {0xfc, 0x2}, {0x3}, {0x1f}, {0x1, 0x7}, {0x2, 0x7}, {0x80, 0x3}], "b3ff264b7b96ee4a"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x20, 0x1}, {0x1f, 0x2}, {0x1, 0x6}, {0x2, 0x3}, {0x7}, {0xfa, 0x2}, {0x2, 0x3}, {0xfd, 0x5}, {0x5, 0x4}, {0x6, 0x3}, {0xcf, 0x4}, {0x12, 0x5}, {0xbd}, {0x20, 0x6}, {0xf0, 0x1}, {0x28, 0x7}, {0xe7, 0x4}], "4d9ce26b2542c127"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x0, 0x1}], "12adc580ea92cbff"}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 05:58:10 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) (async) mmap$qrtrtun(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x1000002, 0x8010, r1, 0x7) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:11 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) 05:58:11 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xcc, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x70}}}}, [@NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x0, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x7, 0x5}, {0xe0}, {0x3, 0x2}, {0x3, 0x4}, {0x0, 0x4}, {0xd9, 0x3}, {0x9, 0x5}, {0xff, 0x6}, {0xf8, 0x1}, {0x5}, {0x3f, 0x6}, {0x80, 0x4}, {0x1, 0x4}, {0xe2}, {0x0, 0x3}, {0x40}, {0x0, 0x3}, {0x1, 0x3}], "23005dc6f813ee44"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x1f, 0x6}, {0x6, 0x2}, {0xfc, 0x4}, {0x1, 0x5}, {0xfa, 0x5}, {0x81, 0x3}, {0x7, 0x1}, {0x0, 0x5}, {0x9}, {0x20, 0x6}, {0xfc, 0x2}, {0x3}, {0x1f}, {0x1, 0x7}, {0x2, 0x7}, {0x80, 0x3}], "b3ff264b7b96ee4a"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x20, 0x1}, {0x1f, 0x2}, {0x1, 0x6}, {0x2, 0x3}, {0x7}, {0xfa, 0x2}, {0x2, 0x3}, {0xfd, 0x5}, {0x5, 0x4}, {0x6, 0x3}, {0xcf, 0x4}, {0x12, 0x5}, {0xbd}, {0x20, 0x6}, {0xf0, 0x1}, {0x28, 0x7}, {0xe7, 0x4}], "4d9ce26b2542c127"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x0, 0x1}], "12adc580ea92cbff"}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xcc, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x70}}}}, [@NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x0, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x7, 0x5}, {0xe0}, {0x3, 0x2}, {0x3, 0x4}, {0x0, 0x4}, {0xd9, 0x3}, {0x9, 0x5}, {0xff, 0x6}, {0xf8, 0x1}, {0x5}, {0x3f, 0x6}, {0x80, 0x4}, {0x1, 0x4}, {0xe2}, {0x0, 0x3}, {0x40}, {0x0, 0x3}, {0x1, 0x3}], "23005dc6f813ee44"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x1f, 0x6}, {0x6, 0x2}, {0xfc, 0x4}, {0x1, 0x5}, {0xfa, 0x5}, {0x81, 0x3}, {0x7, 0x1}, {0x0, 0x5}, {0x9}, {0x20, 0x6}, {0xfc, 0x2}, {0x3}, {0x1f}, {0x1, 0x7}, {0x2, 0x7}, {0x80, 0x3}], "b3ff264b7b96ee4a"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x20, 0x1}, {0x1f, 0x2}, {0x1, 0x6}, {0x2, 0x3}, {0x7}, {0xfa, 0x2}, {0x2, 0x3}, {0xfd, 0x5}, {0x5, 0x4}, {0x6, 0x3}, {0xcf, 0x4}, {0x12, 0x5}, {0xbd}, {0x20, 0x6}, {0xf0, 0x1}, {0x28, 0x7}, {0xe7, 0x4}], "4d9ce26b2542c127"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x0, 0x1}], "12adc580ea92cbff"}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) 05:58:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ef, 0x56}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0xe31281c8842d0e93) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x1, r2, 0x1c, 0x0, @in={0x2, 0x4e24, @local}}}, 0xa0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r3 = syz_open_dev$vcsu(&(0x7f0000000400), 0x2, 0x200040) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x811) 05:58:11 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) 05:58:11 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:11 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:11 executing program 3: syz_open_dev$vcsn(&(0x7f0000000040), 0xfffffffffffffffd, 0x33ff41) 05:58:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ef, 0x56}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0xe31281c8842d0e93) (async, rerun: 64) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (rerun: 64) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x1, r2, 0x1c, 0x0, @in={0x2, 0x4e24, @local}}}, 0xa0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r3 = syz_open_dev$vcsu(&(0x7f0000000400), 0x2, 0x200040) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x811) 05:58:11 executing program 3: syz_open_dev$vcsn(&(0x7f0000000040), 0xfffffffffffffffd, 0x33ff41) 05:58:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ef, 0x56}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0xe31281c8842d0e93) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x1, r2, 0x1c, 0x0, @in={0x2, 0x4e24, @local}}}, 0xa0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r3 = syz_open_dev$vcsu(&(0x7f0000000400), 0x2, 0x200040) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x811) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ef, 0x56}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0xe31281c8842d0e93) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, 0x2}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0), 0x13f, 0x5}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x1, r2, 0x1c, 0x0, @in={0x2, 0x4e24, @local}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) syz_open_dev$vcsu(&(0x7f0000000400), 0x2, 0x200040) (async) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x811) (async) 05:58:11 executing program 3: syz_open_dev$vcsn(&(0x7f0000000040), 0xfffffffffffffffd, 0x33ff41) 05:58:11 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xa6a, 0x688800) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x24008085) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000004c0)={0x5, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x1}}, 0x18) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_virt_wifi\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xca}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x80) 05:58:11 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) 05:58:11 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:11 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xa6a, 0x688800) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x24008085) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000004c0)={0x5, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x1}}, 0x18) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_virt_wifi\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xca}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x80) 05:58:11 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000fbdbdf251100000008000300", @ANYRES32=0x0, @ANYBLOB="0500c200c70000001c001180040002000400010018000200040002000400010004000600"], 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x0) 05:58:11 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) 05:58:11 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:11 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000fbdbdf251100000008000300", @ANYRES32=0x0, @ANYBLOB="0500c200c70000001c001180040002000400010018000200040002000400010004000600"], 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000fbdbdf251100000008000300", @ANYRES32=0x0, @ANYBLOB="0500c200c70000001c001180040002000400010018000200040002000400010004000600"], 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) 05:58:11 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xa6a, 0x688800) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x24008085) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000004c0)={0x5, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x1}}, 0x18) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_virt_wifi\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xca}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x80) 05:58:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x301400, 0x0) r2 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r2) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf250500000008001700", @ANYRES32=r2, @ANYBLOB="06001d008800000006001b004e230000080011000100000006000300ff0300000500210001000000050014000200000006001a004e240000f1636df2156dfae15964f88e0c4efc0fdb7b26262da0b7f9732b3ff43b999d3b9838b6b5777e0f2905e1ea7c234b2f07f63ae1ef1ae36cfccb119f0b2029bd6028b1303fbc5909"], 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r4, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:11 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000fbdbdf251100000008000300", @ANYRES32=0x0, @ANYBLOB="0500c200c70000001c001180040002000400010018000200040002000400010004000600"], 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000fbdbdf251100000008000300", @ANYRES32=0x0, @ANYBLOB="0500c200c70000001c001180040002000400010018000200040002000400010004000600"], 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) 05:58:11 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x8000000000000, 0x40f41) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x8001, 0xc1, "1eb96e18860dee41a6a396451b3669d1fc3eb53c8a0d3e40e0f5672ab5f52ff345dad33f2d72c3749244ac2656d671d079aa68a1fef6a621dd57c335d2f37abe57d4fe6bbf1b597ead76e28e3baa51c58f8b02bd07feb48169db8f291711951062b25e3ee64608d58d1dd512877bf1b1019f747a88787dde067caee9ca81886a5372b3c2e0b95bb6708d1fedba7ede0812933dfd981477644d340cd946a4bb715067da7baf91c1c770aacece75eb02fe0909e3f9d5ae4f77fbff134864c2ee0bc8f1bf7d0ff8fe9d8abda8e741c24ae6de2e1f06435dc86af873a50f893915b90edcf2b6707e8efe1fcaab0c631208e21ef68098074a1f9eeee69e58e83e799a", 0x1, 0x20, 0x0, 0x80, 0xbb, 0xf7, 0x7f}}}, 0x120) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f00000000c0)}}, 0x10) 05:58:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x301400, 0x0) (rerun: 64) r2 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r2) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf250500000008001700", @ANYRES32=r2, @ANYBLOB="06001d008800000006001b004e230000080011000100000006000300ff0300000500210001000000050014000200000006001a004e240000f1636df2156dfae15964f88e0c4efc0fdb7b26262da0b7f9732b3ff43b999d3b9838b6b5777e0f2905e1ea7c234b2f07f63ae1ef1ae36cfccb119f0b2029bd6028b1303fbc5909"], 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r4, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:11 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 05:58:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x301400, 0x0) (async, rerun: 32) r2 = socket(0x1a, 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$l2tp(0x0, r2) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf250500000008001700", @ANYRES32=r2, @ANYBLOB="06001d008800000006001b004e230000080011000100000006000300ff0300000500210001000000050014000200000006001a004e240000f1636df2156dfae15964f88e0c4efc0fdb7b26262da0b7f9732b3ff43b999d3b9838b6b5777e0f2905e1ea7c234b2f07f63ae1ef1ae36cfccb119f0b2029bd6028b1303fbc5909"], 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r4, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) (async) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:11 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:11 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:11 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) 05:58:11 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r1) recvmsg$can_j1939(r1, &(0x7f0000001580)={&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/233, 0xe9}, {&(0x7f0000000200)=""/92, 0x5c}, {&(0x7f0000000280)=""/225, 0xe1}, {&(0x7f0000000380)=""/189, 0xbd}, {&(0x7f0000000440)=""/132, 0x84}], 0x5, &(0x7f0000000580)=""/4096, 0x1000}, 0x20) 05:58:11 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r1) recvmsg$can_j1939(r1, &(0x7f0000001580)={&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/233, 0xe9}, {&(0x7f0000000200)=""/92, 0x5c}, {&(0x7f0000000280)=""/225, 0xe1}, {&(0x7f0000000380)=""/189, 0xbd}, {&(0x7f0000000440)=""/132, 0x84}], 0x5, &(0x7f0000000580)=""/4096, 0x1000}, 0x20) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) socket(0x1a, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(0x0, r1) (async) recvmsg$can_j1939(r1, &(0x7f0000001580)={&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/233, 0xe9}, {&(0x7f0000000200)=""/92, 0x5c}, {&(0x7f0000000280)=""/225, 0xe1}, {&(0x7f0000000380)=""/189, 0xbd}, {&(0x7f0000000440)=""/132, 0x84}], 0x5, &(0x7f0000000580)=""/4096, 0x1000}, 0x20) (async) 05:58:11 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r1) recvmsg$can_j1939(r1, &(0x7f0000001580)={&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/233, 0xe9}, {&(0x7f0000000200)=""/92, 0x5c}, {&(0x7f0000000280)=""/225, 0xe1}, {&(0x7f0000000380)=""/189, 0xbd}, {&(0x7f0000000440)=""/132, 0x84}], 0x5, &(0x7f0000000580)=""/4096, 0x1000}, 0x20) 05:58:11 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) socket$inet_udp(0x2, 0x2, 0x0) 05:58:11 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (async) socket$inet_udp(0x2, 0x2, 0x0) 05:58:12 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x8000000000000, 0x40f41) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x8001, 0xc1, "1eb96e18860dee41a6a396451b3669d1fc3eb53c8a0d3e40e0f5672ab5f52ff345dad33f2d72c3749244ac2656d671d079aa68a1fef6a621dd57c335d2f37abe57d4fe6bbf1b597ead76e28e3baa51c58f8b02bd07feb48169db8f291711951062b25e3ee64608d58d1dd512877bf1b1019f747a88787dde067caee9ca81886a5372b3c2e0b95bb6708d1fedba7ede0812933dfd981477644d340cd946a4bb715067da7baf91c1c770aacece75eb02fe0909e3f9d5ae4f77fbff134864c2ee0bc8f1bf7d0ff8fe9d8abda8e741c24ae6de2e1f06435dc86af873a50f893915b90edcf2b6707e8efe1fcaab0c631208e21ef68098074a1f9eeee69e58e83e799a", 0x1, 0x20, 0x0, 0x80, 0xbb, 0xf7, 0x7f}}}, 0x120) (async, rerun: 64) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async, rerun: 64) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f00000000c0)}}, 0x10) 05:58:12 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (async) socket$inet_udp(0x2, 0x2, 0x0) 05:58:12 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) 05:58:12 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 05:58:12 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:12 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:12 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2, 0x6}}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:12 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) (async) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2, 0x6}}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:12 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) (rerun: 64) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2, 0x6}}, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (rerun: 64) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:12 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000280)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xfffffffa}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000240)=0x10, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r9}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0xa, 0x1, 0xfa00, {r10}}, 0xc) 05:58:12 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:12 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000280)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xfffffffa}}, 0x10) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000240)=0x10, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r9}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) (async) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0xa, 0x1, 0xfa00, {r10}}, 0xc) 05:58:13 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x8000000000000, 0x40f41) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x8001, 0xc1, "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", 0x1, 0x20, 0x0, 0x80, 0xbb, 0xf7, 0x7f}}}, 0x120) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f00000000c0)}}, 0x10) 05:58:13 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000280)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xfffffffa}}, 0x10) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000240)=0x10, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r9}}, 0x10) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) (async) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0xa, 0x1, 0xfa00, {r10}}, 0xc) 05:58:13 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:13 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:13 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:13 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) 05:58:13 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7, 0x389481) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r3}}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x61}, 0xc) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r5, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x43}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x200040c0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) 05:58:13 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7, 0x389481) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r3}}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x61}, 0xc) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r5, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x43}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x200040c0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x7, 0x389481) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) (async) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r3}}, 0xc) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x61}, 0xc) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) (async) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r5, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x43}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x200040c0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) 05:58:13 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7, 0x389481) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) (async) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r3}}, 0xc) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x61}, 0xc) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r5, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x43}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x200040c0) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) 05:58:13 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x40000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000000c0)=0x8) r1 = socket$inet6(0xa, 0x4, 0x3) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000180)={@ipv4={""/10, ""/2, @dev}}, &(0x7f00000001c0)=0x14) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080)=0x266b, 0x4) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x7fffffff, 0x1e7440) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000140)={0xa, 0x4}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r4) sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x22}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}}, 0x41) 05:58:13 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:13 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:13 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) 05:58:13 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040027bd77400ac48810d407c45a26b17000fb06df25030000000c001600000000000000007b0cf31fd37223ebf2c7e0a80008000c00030000000800090002000000050021000000000008000a000400000008000b000100000035d7fcc14624bb927055fdd2e61d32bd5be1c2cc12"], 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) 05:58:13 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:13 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x40000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000000c0)=0x8) (async) r1 = socket$inet6(0xa, 0x4, 0x3) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000180)={@ipv4={""/10, ""/2, @dev}}, &(0x7f00000001c0)=0x14) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080)=0x266b, 0x4) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x7fffffff, 0x1e7440) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000140)={0xa, 0x4}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r4) (async) sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x22}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}}, 0x41) 05:58:13 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:13 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:13 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040027bd77400ac48810d407c45a26b17000fb06df25030000000c001600000000000000007b0cf31fd37223ebf2c7e0a80008000c00030000000800090002000000050021000000000008000a000400000008000b000100000035d7fcc14624bb927055fdd2e61d32bd5be1c2cc12"], 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) 05:58:13 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040027bd77400ac48810d407c45a26b17000fb06df25030000000c001600000000000000007b0cf31fd37223ebf2c7e0a80008000c00030000000800090002000000050021000000000008000a000400000008000b000100000035d7fcc14624bb927055fdd2e61d32bd5be1c2cc12"], 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) 05:58:13 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x40000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000000c0)=0x8) (async) r1 = socket$inet6(0xa, 0x4, 0x3) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000180)={@ipv4={""/10, ""/2, @dev}}, &(0x7f00000001c0)=0x14) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080)=0x266b, 0x4) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x7fffffff, 0x1e7440) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000140)={0xa, 0x4}, 0xc) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r4) sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x22}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}}, 0x41) 05:58:13 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x200000) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x3f, 0x16000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f0000000140), 0x0, {0xa, 0x4e22, 0x1f8982ee, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7}, r2}}, 0x38) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) 05:58:13 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x200000) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x3f, 0x16000) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f0000000140), 0x0, {0xa, 0x4e22, 0x1f8982ee, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7}, r2}}, 0x38) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) 05:58:13 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000280), 0x1, {0xa, 0x4e20, 0x1, @loopback, 0xfffffff9}, r1}}, 0x38) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000180), r6, 0x282}}, 0x18) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r1}}, 0xc) 05:58:14 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) 05:58:14 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x200000) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x3f, 0x16000) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f0000000140), 0x0, {0xa, 0x4e22, 0x1f8982ee, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7}, r2}}, 0x38) (async, rerun: 64) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (rerun: 64) 05:58:14 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:14 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) (rerun: 32) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000280), 0x1, {0xa, 0x4e20, 0x1, @loopback, 0xfffffff9}, r1}}, 0x38) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000180), r6, 0x282}}, 0x18) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r1}}, 0xc) 05:58:14 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000180), 0x20000000, &(0x7f00000000c0)) r1 = pidfd_open(0xffffffffffffffff, 0x0) process_madvise(r1, &(0x7f0000001400)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000000000)="c73386b07cca357f073ef459a82e9e0103b1ff1afb829674a1b2b8976a94b543a862d0e8b596b17862062a115592a4ee6e5780abcdc09a063cb1294f0d89e9d5ebc54f577de63c308aaf3b50dc6db238602372919c359dae1465bd7710b735", 0x5f}, {&(0x7f0000001200)="693000567f8a492d1663f29a9cd352156cdada2c6e1dfb67551c061d8297a4c5512f1e0a391e4ce17875f5c4c07166fdee26379b80", 0x35}, {&(0x7f0000001240)="a82aceb8a5f967444e16942b0c55f7524b9e5387537d5aab9bbd69369daa3cf437ef2e99d79cc6fc3cf1f7446c4eda000ab4c446732b35bd7c1dc50e8a384c889ce36de17f0695350bfcc0b052e5acc4b5d21505e1c960adc668b0af3684213c0a1da7ed8990edbc7fadd885d0f564e0d68cf45be56cece99dc65262cb04e89861fa6010002f38", 0x87}, {&(0x7f0000001300)="e96d8188dca41526870b7dd3c8800a3ac627bf5327956478ca8ee95ce7c43639a2ee7904f2e37b91c62eb4e3b3dcd20eedf7b1fa41d4888b9df9031a93dda24afb78c09fc661b1948fedcd154cdfe3b5018d7724b1a666a351f3aac7e76eae1042cccade36b34b2bb2c3e3e9fe885a8e8d26668b6f87c688f42c036bec14dbca1dbb866ad82d37f1a4d987db068448a1ff36e5574b527f81427ed940f3eaa45e2c70278f7ebe626a32288c4e5cff2967462d6f3892a3bb6eec28d985cde2d8dedf66d911aa83452624b2d6cbc6cc2ad2a11113", 0xd3}], 0x5, 0x11, 0x0) 05:58:14 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:14 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:14 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) (async) waitid$P_PIDFD(0x3, r0, &(0x7f0000000180), 0x20000000, &(0x7f00000000c0)) (async) r1 = pidfd_open(0xffffffffffffffff, 0x0) process_madvise(r1, &(0x7f0000001400)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000000000)="c73386b07cca357f073ef459a82e9e0103b1ff1afb829674a1b2b8976a94b543a862d0e8b596b17862062a115592a4ee6e5780abcdc09a063cb1294f0d89e9d5ebc54f577de63c308aaf3b50dc6db238602372919c359dae1465bd7710b735", 0x5f}, {&(0x7f0000001200)="693000567f8a492d1663f29a9cd352156cdada2c6e1dfb67551c061d8297a4c5512f1e0a391e4ce17875f5c4c07166fdee26379b80", 0x35}, {&(0x7f0000001240)="a82aceb8a5f967444e16942b0c55f7524b9e5387537d5aab9bbd69369daa3cf437ef2e99d79cc6fc3cf1f7446c4eda000ab4c446732b35bd7c1dc50e8a384c889ce36de17f0695350bfcc0b052e5acc4b5d21505e1c960adc668b0af3684213c0a1da7ed8990edbc7fadd885d0f564e0d68cf45be56cece99dc65262cb04e89861fa6010002f38", 0x87}, {&(0x7f0000001300)="e96d8188dca41526870b7dd3c8800a3ac627bf5327956478ca8ee95ce7c43639a2ee7904f2e37b91c62eb4e3b3dcd20eedf7b1fa41d4888b9df9031a93dda24afb78c09fc661b1948fedcd154cdfe3b5018d7724b1a666a351f3aac7e76eae1042cccade36b34b2bb2c3e3e9fe885a8e8d26668b6f87c688f42c036bec14dbca1dbb866ad82d37f1a4d987db068448a1ff36e5574b527f81427ed940f3eaa45e2c70278f7ebe626a32288c4e5cff2967462d6f3892a3bb6eec28d985cde2d8dedf66d911aa83452624b2d6cbc6cc2ad2a11113", 0xd3}], 0x5, 0x11, 0x0) 05:58:14 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000280), 0x1, {0xa, 0x4e20, 0x1, @loopback, 0xfffffff9}, r1}}, 0x38) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000180), r6, 0x282}}, 0x18) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r1}}, 0xc) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100), 0x2, 0x5}}, 0x20) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000280), 0x1, {0xa, 0x4e20, 0x1, @loopback, 0xfffffff9}, r1}}, 0x38) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000180), r6, 0x282}}, 0x18) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r1}}, 0xc) (async) 05:58:14 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x832, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x401}}, 0x10) r1 = pidfd_getfd(r0, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002fd085d82b1e0c346fd29280fca31c982534b62f70bd2e0cd7f8aaad21bc5ae4427f1133a1711515d71a62a2e28fbdd3ed73553f273a6dc284bfd37002b99bdee63387cbffb697dcbf215ca6a7ed07459f93ed94239b269572579f700d751fdd639143434350f17afecbfe8d42c85addfc156991a3a1f89e66db9c28be7145a5b72808c41ef26ac125f50f4f7ece4a6c2ac771c4a0dfc2f50fd95ee8c3f1f404344af9f7a7d13944a92188d74ea211005df178", @ANYRES16=r3, @ANYBLOB="00012cbd7000fcdbdf250600000006001b004e23000014001f00fe8800000000000000000000000001010500130001000000060001000b00000006001a004e210000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000140)={0x1, 0x10}, 0x18) 05:58:14 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000180), 0x20000000, &(0x7f00000000c0)) r1 = pidfd_open(0xffffffffffffffff, 0x0) process_madvise(r1, &(0x7f0000001400)=[{&(0x7f0000000200)="063e0ce8a089bbc57e5832d45e837bc4069d036c136a766c201fc9046a032e1b533a0a7c23674704161ec45257fb69cb0d769009563e12ae16ee8ae0bda03cefda4d98b58d3542ac2fe9ea3c244f08106688d382bda2f00bbb7586057d0a0b458ca44cfbe1219e44dbc3fdbc107aface6bd1a488f8ba1673f329762710d39c5e7367e859c9c7116aa419d6bc7186387e631764543403e289c59f10f4d5fc8b1912dac257e5d60ab0da9d7e0e5b87e46743705e2a569111b3ee6aaec8b48519a075eca251bf79e3d999b21f348402766d1ce37f387fd680b2139d73351644036cd7e4bf1e400c38b896f498cf81ffd5d669486e3187514b7a1691157defd098a0d8f04552292d289ad55eb672a5a611c81c92ba86e1e8fb6b9a82e67bd2d545bf2bba8255654c18ec2b8666db3615d87e0bb876762e9a72a4c70434593d065ab61e2a69d2e725c67c25ae96855714713d226c1fcb20db0b95b6f8cc492cf1301bef2ce183ba06e7a7178c81c2987ef660742774125303a18961d72f8c011071fefe632a125e7e50f141964b001780681d3d8af54c2949f360c646abea19402a427e0577ca2d46ebd1b6bae5903eac57c9e77d36cc041ac65a6c351232f710383278d6a85d93f0029c691755a29549bf94c09a63851bedc1ff04be7894237ac1c8da9c6dae751d88ce41ad095355b555518edea1e78401606ce11217a1dda7837c681699ee736a22143a656ca4e964e33a59b4f7f36df00e6f825ccbd2685d2bc17c90be7bc97cf70e0b446d576295449238bd607ecbf826d62965e50b2c9c7d70feebfb3569741dd45880d04f8fbd763c7e7971ce02a43fae6415d5b1fc4caf787b2e54c054dba18aeee8cd2bcda8b636b8f299f4ed317307c6e191ebc6c69a499b7fa4987a9b07b7a7262986886bdb7f758f6c8151712c67dfcc7708a15370436ad54083826bf5224ab083d039225191ca5287346c1e52a7463cc0639a49f1e36e347918eea25ea11e6af122acf1dfa4031d5fa017a963f5c5e03e667531a833fba9f42c4c2d576519da7aea1b5bf924df3ef1a1b257a64e6d52a2de50e1ce672c513587be8eb13a095f217329c10ec7ecc740ef80851e107fe92e202903055926fc06b66c50caa722a29050d4decb48a4fbc93e514a2f0aac7e79839b66021c77f7dca18b03b1bccac234670a0273e7b96c1c8286b4ee33656efdbf1f285d4e2dc4cc9bfc2a3e150d1a877a570d15cb0a36b536a850473b0cd5639f001268e1f13b48fe41051e9e8e2cbdc7009e45a50111f5d333ed3fcfbcdb7f668ce222faaade6154a617ee51157551ce1c139192af89a0605e8e01ac1b16f9b0c26a3d40beacd6413b53c56a34c8ff59e290aa660be347cc1b8f2cc0794df6f3321ef0de082d2fbd1e679ba48c11e056e7de4ee5bef1f51e763f8d1dacc5c4942a459d782a57091fe89e295d0952e2e08ba7aab6e4621d3aa184e91e6f1c91188462f3879e9524d4df82228828d58cc36ae997c6f38a8121a32d50cf659b36b4ca96a7a5e412aa3e5cda1870b7b5d2cf39f0b891fa18de60a2eb6f92cfe263110e8e7fdbfd525b90eda8c92999d113e6240362b70324b7398c0a9ac172d8edf0d783ce915cc9b17fb29f5f52807a2cc63444a5a09f51b914f767dc47047337e9647e0f4390fd475e4750c1984f8c2b0f24031fa0741cad64f9e6c55267ea274d1acb8b0cc1044af53bff18ef94e841c65978a1f63357a1c373ae5b8b4bc5b3c61f7cda45e5af7bc1672347d3e6a2d37f5f0e9e656d75ae802f4bcf7a70031a82aa5721b8bbfe7478896c62d7ce3095feb77cd668cab18b753d3a46709ac9b67c2a7d8b19ea5d7a0cdc00260788613e3e0a6307f7a4fd353b7e4278e868673b01f4121d936fe8b7ce4efb9369a9e085510fc4bb87e4d6b35d96032885c25a9422b10757e4e230a09def542579f2f0558dd31d566ba33e41db160bb94813c7f23ce92a5d88b409da248a57b2bd630328c2cea3cb738c250803c9e1aa0bd1fafec82d37601c977bf34417a824a70938da42ecd766c8afad7fce13358326064c4c4a3782524c6440b7a98f38fcd26def657e5b30979643763af246833a25c4f88841d9c15992327b55e2c9914de9b8088db4656522dc57db82aeaea7f304af6509606281084944cfca55971d9ce4f0c1d137953bead0425c5ed2068b187eeec7e15769f4bc9414a0f2c6c902a47a389a22980dd4e397fc312a969c08c09f557f54715cfa410f24d4bb54a319e704f949bd23df43f8db8465062d0edc19402e6e75b096ac3ce5deedf59bfcc06031d8a43a1fca5bbd3c47006a4121d97294958308d9efc7a4f401c712215e3893e21e9f8a5c2680f05113352a7e52da2618599ab7f3587548b085376464dde15162c0a4c937b8e6c85b3576dc9630873af3896d4ae9d16bb3631b0b3e6c76dc5f1df81933714e9a3955701c7a44b429f96eab5adf3d0229c1f460f5f5ec91a5d6ba9ff1bfbc867e61f8e4ec8f4c4aa6d8515df0f2f13375a8b3d99e3acafe6f3f4290da752d6481217d65f233c33b5d6f04cf170fec032047acd48c519ad11f7aad66308e3ad00aeaf0ebb6646675258ef03feb604215e71ac94677f392bae3dca74229feb380fb60af85d354ea9f7294580714cb677a00fcb3d9f8dd909970b4e771c46d2c2d6c140696696332d64230fafb8f21649c5674a89ac20c474248e1fbf6d4c2123df6be48f236039064d720fb4959a07f6f43145f39ca047979e644d0f8dfebc6b714fc2c873995fb67066714bc54c67a3e10caaa8cd613ccea55012ce3dffa1e0628d756a15de75477302572e4ea561c9bab23ed5e4b41049b66e75d71d31caee0ce9d4e1a68f8bece3cb0a8b59db9ecf4e79bf974d730a7f46e4de28a3733dec8993d5860586c4dff8296468fdd25acafb6ce86bd1d9bc2fc3730dcf334966a1d9ab78b220f7e971e0c443fa5ee7267fb299c1c6b40982ef7c20e46f9cda0c6a837c471a5c926a139ade88b0d4b8a60358944a47e4f28ec073c57841ad94b60a265d13e0f38cae41bb2eea2ae521cd721e90129a789302c357bbd69941e282f3880ed71dac458a85002e7367a4a461f0d7e06e31cad8aa7a94bdb1a44077c80c2681f98c53ff812559227733f6e8f8273f3f9db197cd491bbc83740b9f67391d6fc4d12aaf61735a55dea97b0ecb8eae6aa1dd81eb47e458d0b1343126f477d9d8cfd362389ca93dfc27e40f729c77523287f23857fcdd6a0209e714c7ed572d2bc42d16f506d612e2f61d74fd421044a7cfc59639fc4e32a5f9f8e60c24e7446e90b3fa337614fecf6a6db37d2719894de8f178018fc103df4c7e43065abf8e65d218008fb8de2d5d0146b37ecbed33b50ea9d10df93251179f079668278eee25606a996b113634a7740269b29c64e81ea12a6cb61d39c03965f55d33d8dece10bdaecdf0cefa551c36cfd54f5613d17534a34e8cd56138c2ca9295f79fec71a6d2d8bb671982a193da4e32e106ff781be1bf990a2d0928309799837ac9bbcef88fa90447cafabd4ecc233cfdb5b10e74ba5e7d4b63e597d8658e06c73fff5e0a5f30f0f2144e31cae065c9db3eeb6c1b1ec36002802437a2392771fe3ef7e8a2055065c1a7a35dc08345ac513f913829d66cfa7831d58b6305c44b64af3272d21d29eb64af43c144fd18478b6dfea206ad66a8ae43bfdb6d35318af54805166322ca98078d7ca4ced9d7c82e9519fe08256965739a3815123b29ea36acb876c78a94bf57d2d93a8a7bf80568b2e28a5b0ddc3c632740f9b7a54345a3194e3e9387535b54af9f2a948d5054445a589167e28452d783ae768600a65caf5bb0975dbc4effd0f6f90c074b8b675e9da33505f12acdade5ea06671c2bebd7970125d52fd2b325b86eb4472ac28eb5483bca6f0b1a11a74a9e52691555751f70a9491d4bc80ac2d5f8e5c64bdd32bb3920c74e68810bd9ac8ee2ff8c84b641933b11ee04ab176f83a58d6a196d1e6af65637283fb6f8331ac36fd1348ed5139a4d010cfaf10c5bfb8c2b5a0c70c316f34d9d24afaf052349082472792e4f3c0347d761da0faf454781bbf35144b4276caa47ae555b2294d4e78eaea5fe9fb575b245c2354c6e6c59ad1b0b2fa0273c46f150369d20cebba6157f348351f42a5ff7511b1f081fb2882600542568b06ccca29c27850f54db15a36e6702c056af03d8be637fe3141ba5a0fb77dcc425188c8f65a6078d5ce91348009b1ed1e39edd8bc8a5608a85eed42a817a7975de883c8f2fc6ff9c88d05f78982a4c77f65794065c780dd90ad0a1afba9938eaa4db23521e7db08a54e0340ecba068e1d4c2a7aad79a2723f8156c4e22cd3dbf75bd311b4703adada53478abe62503ace7e816c55eb6c1440ec33dc8023c04618c8ac4a8b1bb6b784c7041936490e8133803064157ec65909129717ad304e843097e176f52f6253a122f698f23e52ac342f31f554c5cfecb1cda4822b801e4524fcf56bdec1c2f2fb49041d51020cf7b14c66ec9c37d6088857dff775a6c5ccaed6228f20e0e81b7a6637253834595b05e0871d305bee22d06e257ca72384edafefbc901e0d3dce566be43cac326a1b70ac1d10356f03ac6e53fc25dc28c93144aa68167d6d681acfdbd2fcde226cdbf28f7c67b12b72a5af1286f8a0d257a90cc40a0256e3f0c60a08e8f1835bb4f8589f09bcabfcaccb06b5be93006173bd0306275eca0c8c4e4c1ddff62b53ee919871cce56f076d660c36da33cf300e782622023d13459c0e2eb59618031179189810d340db5fd83763b12792759a07e1ace6123dd9fc06d617a3db8646a6f99ae849ca9395d67913ca9a5d4f6e94d52392e3949567d8c13f6fe379da7f3ec80c965ea0c57cae71d3b8bb02c6d2f1c91928208040bee631c75abce8623e9d39a9bf6f0a9f063d80e30fcfde52e46d49a49d7caa2c9816b0a04b1ebd9d6692826de8064ae0ec416103b41c05b6ec5e2d6c8f341c32149e41109729b45318245ee874e9aade282e5ee915f75d33012178f7e2be59a629297b68f2606dbcdf11ff5d14fc0296e88ee22108c563f8a90028f64ae168ff160b75819997e93f9db24f91f6f1dfe4e8211534ac3a60880ed2eb4c7a1c39bee2de0036f3122d63b573f88ede9f63670494222dbc38cf91c2969f23654b45f427b7687e8566f1144d7b29242ed760c0b77b6e45586d67bdb21a81f0f5bb5b7f03d0b0546711251bb1becfa4a2134fe980d3ec022ba2c0fafe4085e0d542a92ce13265f69bbcd43810e173fc99598596be84403adaf2d495928d216940a1e500ce689122060667d191361a7dd3cf71fef16703626defa0e81d85d7a769de7229a2ae335d4db83957b8f956deb9f621b969eba6c96777202af9ddf10dbf9679cabe1149d8504c1d95685b7c7ed86adc8a01184c4cd718dc15e063ffae4cd08c21a4265c388ced010f2a131c98a367f29e6f19b7e4d596bdc66766e3943c5e075c51513be4107e363faa7aaedddcf784eae95484af49790ace360c1c0453e9a1ba4af55b2d36a42a52ed768ff8c36e07f0f1d4826e3343f9f276c0392d2b55352bcc43c9bb6338639311a1ac1a62c2a1ca877137bc8a4144f44cbf37f5c7a451632f1de11bb7c1bbc30b77581ef0a983858bb969c8a7c34e4ad317c220e3ac975e92c55b57deb5781b3c8b2709b30a347bd7487c5bbc6355d666665aad606864d9d7b3a77245e7ca2027e6926e060aa3eed71482eb18507f0c4982137fff3936dfa09bb20186", 0x1000}, {&(0x7f0000000000)="c73386b07cca357f073ef459a82e9e0103b1ff1afb829674a1b2b8976a94b543a862d0e8b596b17862062a115592a4ee6e5780abcdc09a063cb1294f0d89e9d5ebc54f577de63c308aaf3b50dc6db238602372919c359dae1465bd7710b735", 0x5f}, {&(0x7f0000001200)="693000567f8a492d1663f29a9cd352156cdada2c6e1dfb67551c061d8297a4c5512f1e0a391e4ce17875f5c4c07166fdee26379b80", 0x35}, {&(0x7f0000001240)="a82aceb8a5f967444e16942b0c55f7524b9e5387537d5aab9bbd69369daa3cf437ef2e99d79cc6fc3cf1f7446c4eda000ab4c446732b35bd7c1dc50e8a384c889ce36de17f0695350bfcc0b052e5acc4b5d21505e1c960adc668b0af3684213c0a1da7ed8990edbc7fadd885d0f564e0d68cf45be56cece99dc65262cb04e89861fa6010002f38", 0x87}, {&(0x7f0000001300)="e96d8188dca41526870b7dd3c8800a3ac627bf5327956478ca8ee95ce7c43639a2ee7904f2e37b91c62eb4e3b3dcd20eedf7b1fa41d4888b9df9031a93dda24afb78c09fc661b1948fedcd154cdfe3b5018d7724b1a666a351f3aac7e76eae1042cccade36b34b2bb2c3e3e9fe885a8e8d26668b6f87c688f42c036bec14dbca1dbb866ad82d37f1a4d987db068448a1ff36e5574b527f81427ed940f3eaa45e2c70278f7ebe626a32288c4e5cff2967462d6f3892a3bb6eec28d985cde2d8dedf66d911aa83452624b2d6cbc6cc2ad2a11113", 0xd3}], 0x5, 0x11, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) (async) waitid$P_PIDFD(0x3, r0, &(0x7f0000000180), 0x20000000, &(0x7f00000000c0)) (async) pidfd_open(0xffffffffffffffff, 0x0) (async) process_madvise(r1, &(0x7f0000001400)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000000000)="c73386b07cca357f073ef459a82e9e0103b1ff1afb829674a1b2b8976a94b543a862d0e8b596b17862062a115592a4ee6e5780abcdc09a063cb1294f0d89e9d5ebc54f577de63c308aaf3b50dc6db238602372919c359dae1465bd7710b735", 0x5f}, {&(0x7f0000001200)="693000567f8a492d1663f29a9cd352156cdada2c6e1dfb67551c061d8297a4c5512f1e0a391e4ce17875f5c4c07166fdee26379b80", 0x35}, {&(0x7f0000001240)="a82aceb8a5f967444e16942b0c55f7524b9e5387537d5aab9bbd69369daa3cf437ef2e99d79cc6fc3cf1f7446c4eda000ab4c446732b35bd7c1dc50e8a384c889ce36de17f0695350bfcc0b052e5acc4b5d21505e1c960adc668b0af3684213c0a1da7ed8990edbc7fadd885d0f564e0d68cf45be56cece99dc65262cb04e89861fa6010002f38", 0x87}, {&(0x7f0000001300)="e96d8188dca41526870b7dd3c8800a3ac627bf5327956478ca8ee95ce7c43639a2ee7904f2e37b91c62eb4e3b3dcd20eedf7b1fa41d4888b9df9031a93dda24afb78c09fc661b1948fedcd154cdfe3b5018d7724b1a666a351f3aac7e76eae1042cccade36b34b2bb2c3e3e9fe885a8e8d26668b6f87c688f42c036bec14dbca1dbb866ad82d37f1a4d987db068448a1ff36e5574b527f81427ed940f3eaa45e2c70278f7ebe626a32288c4e5cff2967462d6f3892a3bb6eec28d985cde2d8dedf66d911aa83452624b2d6cbc6cc2ad2a11113", 0xd3}], 0x5, 0x11, 0x0) (async) 05:58:14 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x84b9, 0x244183) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0600000000000000df253e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000069000000"], 0x28}, 0x1, 0x0, 0x0, 0x401}, 0x84) 05:58:14 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:14 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:14 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x84b9, 0x244183) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0600000000000000df253e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000069000000"], 0x28}, 0x1, 0x0, 0x0, 0x401}, 0x84) syz_open_dev$vcsn(&(0x7f0000000140), 0x84b9, 0x244183) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0600000000000000df253e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000069000000"], 0x28}, 0x1, 0x0, 0x0, 0x401}, 0x84) (async) 05:58:14 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x84b9, 0x244183) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0600000000000000df253e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000069000000"], 0x28}, 0x1, 0x0, 0x0, 0x401}, 0x84) 05:58:14 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={0x16, 0x2, 0x2}, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x10000000000000, 0xc6f01) read$qrtrtun(r0, &(0x7f0000000040)=""/40, 0x28) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x1, 0x4) 05:58:14 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:14 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={0x16, 0x2, 0x2}, 0x0) (async) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x10000000000000, 0xc6f01) read$qrtrtun(r0, &(0x7f0000000040)=""/40, 0x28) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x1, 0x4) 05:58:14 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:14 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:14 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x832, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x401}}, 0x10) (async) r1 = pidfd_getfd(r0, r0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r2) (async, rerun: 64) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) (rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002fd085d82b1e0c346fd29280fca31c982534b62f70bd2e0cd7f8aaad21bc5ae4427f1133a1711515d71a62a2e28fbdd3ed73553f273a6dc284bfd37002b99bdee63387cbffb697dcbf215ca6a7ed07459f93ed94239b269572579f700d751fdd639143434350f17afecbfe8d42c85addfc156991a3a1f89e66db9c28be7145a5b72808c41ef26ac125f50f4f7ece4a6c2ac771c4a0dfc2f50fd95ee8c3f1f404344af9f7a7d13944a92188d74ea211005df178", @ANYRES16=r3, @ANYBLOB="00012cbd7000fcdbdf250600000006001b004e23000014001f00fe8800000000000000000000000001010500130001000000060001000b00000006001a004e210000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000140)={0x1, 0x10}, 0x18) 05:58:14 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:14 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={0x16, 0x2, 0x2}, 0x0) (async) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x10000000000000, 0xc6f01) read$qrtrtun(r0, &(0x7f0000000040)=""/40, 0x28) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x1, 0x4) 05:58:14 executing program 3: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7fffffff, 0x1, "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", 0x5, 0x3, 0x5, 0x3f, 0x30, 0x6, 0x1, 0x1}}}, 0x120) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = socket(0x21, 0x804, 0xf708) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001000080e20000000a000653d24a4e7537bc552683b166f5a23e0b00"], 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x20004044) 05:58:14 executing program 3: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7fffffff, 0x1, "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", 0x5, 0x3, 0x5, 0x3f, 0x30, 0x6, 0x1, 0x1}}}, 0x120) (async, rerun: 64) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (rerun: 64) r0 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) r1 = socket(0x21, 0x804, 0xf708) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001000080e20000000a000653d24a4e7537bc552683b166f5a23e0b00"], 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x20004044) 05:58:14 executing program 3: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7fffffff, 0x1, "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", 0x5, 0x3, 0x5, 0x3f, 0x30, 0x6, 0x1, 0x1}}}, 0x120) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = socket(0x21, 0x804, 0xf708) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001000080e20000000a000653d24a4e7537bc552683b166f5a23e0b00"], 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x20004044) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7fffffff, 0x1, "621e336125d43a668fb853101e396d6aad700f6d15d5a98448c673319d53113682fc5eeafc2adc5b451f38d4d2f53e2cc3d825a71fa2ae8339cbc0028c9fa588f4322b7447d4e9048e5805d2668f4674c446b88f45282102c6ee8aa32f51a7564c1dc2b3d3524cd155e4959cf8d6a36ed6f00b1ccde45131c5208c14953962816ad00dd26914e5958639d135f146dffecef3f5f0b198ff8d8c39cf7532de23acaff59c537867ec692b108c7268dc49ce4e8ea53afc47dec5a0b58140e31d5c0925d99ab529c53b4e0b9945b186c5c947661a8389b5429ba7e4fad586e2359d99575419ed2dafceb52277a3af61b712891413c5ea4e03fa7fa1d3bbc43e343834", 0x5, 0x3, 0x5, 0x3f, 0x30, 0x6, 0x1, 0x1}}}, 0x120) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) socket$netlink(0x10, 0x3, 0xf) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) socket(0x21, 0x804, 0xf708) (async) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001000080e20000000a000653d24a4e7537bc552683b166f5a23e0b00"], 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x20004044) (async) 05:58:14 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xbb0c, 0x800440) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xe}}, 0x10) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x7fff, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000100)=r0, 0x1) syz_open_dev$vcsn(&(0x7f0000000140), 0xfffffffffffffffe, 0x4446c1) 05:58:14 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xbb0c, 0x800440) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xe}}, 0x10) (async, rerun: 64) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x7fff, 0x0) (rerun: 64) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000100)=r0, 0x1) syz_open_dev$vcsn(&(0x7f0000000140), 0xfffffffffffffffe, 0x4446c1) 05:58:14 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:14 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xbb0c, 0x800440) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xe}}, 0x10) (async) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x7fff, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000100)=r0, 0x1) (async) syz_open_dev$vcsn(&(0x7f0000000140), 0xfffffffffffffffe, 0x4446c1) 05:58:14 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:14 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x832, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x401}}, 0x10) (async) r1 = pidfd_getfd(r0, r0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r2) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002fd085d82b1e0c346fd29280fca31c982534b62f70bd2e0cd7f8aaad21bc5ae4427f1133a1711515d71a62a2e28fbdd3ed73553f273a6dc284bfd37002b99bdee63387cbffb697dcbf215ca6a7ed07459f93ed94239b269572579f700d751fdd639143434350f17afecbfe8d42c85addfc156991a3a1f89e66db9c28be7145a5b72808c41ef26ac125f50f4f7ece4a6c2ac771c4a0dfc2f50fd95ee8c3f1f404344af9f7a7d13944a92188d74ea211005df178", @ANYRES16=r3, @ANYBLOB="00012cbd7000fcdbdf250600000006001b004e23000014001f00fe8800000000000000000000000001010500130001000000060001000b00000006001a004e210000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000140)={0x1, 0x10}, 0x18) 05:58:14 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:14 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:14 executing program 3: r0 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) r1 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r3) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {r6, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x4, @empty}, @in6={0xa, 0x4e20, 0x6, @empty, 0x20}}}, 0x118) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80004}, 0x800) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r7) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r7) getsockname$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x1f, @local, 0x10001}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e20, 0x10001, @private2, 0xfffff801}, @in={0x2, 0x4e22, @multicast1}], 0x78) syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x54741) 05:58:14 executing program 3: r0 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) r1 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r3) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) (async, rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {r6, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x4, @empty}, @in6={0xa, 0x4e20, 0x6, @empty, 0x20}}}, 0x118) (async, rerun: 32) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80004}, 0x800) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r7) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r7) (async) getsockname$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x1f, @local, 0x10001}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e20, 0x10001, @private2, 0xfffff801}, @in={0x2, 0x4e22, @multicast1}], 0x78) syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x54741) 05:58:14 executing program 3: r0 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) r1 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r3) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {r6, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x4, @empty}, @in6={0xa, 0x4e20, 0x6, @empty, 0x20}}}, 0x118) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80004}, 0x800) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r7) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r7) getsockname$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x1f, @local, 0x10001}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e20, 0x10001, @private2, 0xfffff801}, @in={0x2, 0x4e22, @multicast1}], 0x78) syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x54741) socket(0x1a, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(0x0, r0) (async) socket(0x1a, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(0x0, r1) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) (async) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r3) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {r6, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x4, @empty}, @in6={0xa, 0x4e20, 0x6, @empty, 0x20}}}, 0x118) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80004}, 0x800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r7) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r7) (async) getsockname$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x1f, @local, 0x10001}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e20, 0x10001, @private2, 0xfffff801}, @in={0x2, 0x4e22, @multicast1}], 0x78) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x54741) (async) 05:58:14 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x7, 0x220642) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x4a}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x8, @remote, 0x10001}}}, 0x30) 05:58:14 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r1 = pidfd_getfd(r0, r0, 0x0) recvmsg$can_j1939(r1, &(0x7f0000001480)={&(0x7f0000000000)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000013c0)=[{&(0x7f00000000c0)=""/199, 0xc7}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)}, {&(0x7f0000001200)=""/202, 0xca}, {&(0x7f0000001300)=""/180, 0xb4}], 0x5, &(0x7f0000001440)=""/58, 0x3a}, 0x40000002) 05:58:14 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x7, 0x220642) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x4a}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x10) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x8, @remote, 0x10001}}}, 0x30) 05:58:14 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:14 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:14 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:14 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:14 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r1 = pidfd_getfd(r0, r0, 0x0) recvmsg$can_j1939(r1, &(0x7f0000001480)={&(0x7f0000000000)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000013c0)=[{&(0x7f00000000c0)=""/199, 0xc7}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)}, {&(0x7f0000001200)=""/202, 0xca}, {&(0x7f0000001300)=""/180, 0xb4}], 0x5, &(0x7f0000001440)=""/58, 0x3a}, 0x40000002) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) pidfd_getfd(r0, r0, 0x0) (async) recvmsg$can_j1939(r1, &(0x7f0000001480)={&(0x7f0000000000)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000013c0)=[{&(0x7f00000000c0)=""/199, 0xc7}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)}, {&(0x7f0000001200)=""/202, 0xca}, {&(0x7f0000001300)=""/180, 0xb4}], 0x5, &(0x7f0000001440)=""/58, 0x3a}, 0x40000002) (async) 05:58:14 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x7, 0x220642) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x4a}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x8, @remote, 0x10001}}}, 0x30) syz_open_dev$vcsu(&(0x7f0000000100), 0x7, 0x220642) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x4a}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x10) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (async) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x8, @remote, 0x10001}}}, 0x30) (async) 05:58:14 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r1 = pidfd_getfd(r0, r0, 0x0) recvmsg$can_j1939(r1, &(0x7f0000001480)={&(0x7f0000000000)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000013c0)=[{&(0x7f00000000c0)=""/199, 0xc7}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)}, {&(0x7f0000001200)=""/202, 0xca}, {&(0x7f0000001300)=""/180, 0xb4}], 0x5, &(0x7f0000001440)=""/58, 0x3a}, 0x40000002) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) pidfd_getfd(r0, r0, 0x0) (async) recvmsg$can_j1939(r1, &(0x7f0000001480)={&(0x7f0000000000)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000013c0)=[{&(0x7f00000000c0)=""/199, 0xc7}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)}, {&(0x7f0000001200)=""/202, 0xca}, {&(0x7f0000001300)=""/180, 0xb4}], 0x5, &(0x7f0000001440)=""/58, 0x3a}, 0x40000002) (async) 05:58:14 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x2a}, 0x87fff34) 05:58:14 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x0) 05:58:14 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x2a}, 0x87fff34) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x2a}, 0x87fff34) (async) 05:58:14 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x0) 05:58:14 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x2a}, 0x87fff34) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x2a}, 0x87fff34) (async) 05:58:14 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:14 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x0) 05:58:14 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:14 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) process_mrelease(r0, 0x0) 05:58:14 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:14 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x4}}, 0x10) 05:58:14 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:14 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) process_mrelease(r0, 0x0) 05:58:14 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x4}}, 0x10) 05:58:14 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x4}}, 0x10) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x4}}, 0x10) (async) 05:58:15 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) process_mrelease(r0, 0x0) 05:58:15 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x40000) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040026bd6300fcdbdfdb258200000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f000056000000"], 0x28}, 0x1, 0x0, 0x0, 0x20040004}, 0x8800) 05:58:15 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:15 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x40000) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040026bd6300fcdbdfdb258200000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f000056000000"], 0x28}, 0x1, 0x0, 0x0, 0x20040004}, 0x8800) 05:58:15 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:15 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) r1 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000010) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, 0xffffffffffffffff, 0x30, 0x1, @in={0x2, 0x4e22, @multicast2}}}, 0xa0) 05:58:15 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x40000) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040026bd6300fcdbdfdb258200000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f000056000000"], 0x28}, 0x1, 0x0, 0x0, 0x20040004}, 0x8800) 05:58:15 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:15 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:15 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) r1 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000010) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, 0xffffffffffffffff, 0x30, 0x1, @in={0x2, 0x4e22, @multicast2}}}, 0xa0) 05:58:15 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x3, 0x44741) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000000e070486ffb8d00e4135e40b6cfee9dd3011f08a4619102a556e0000000000000000", @ANYRES16=r3, @ANYBLOB="05042cbd7000fbdbdf255700000008000300da65f873a0520bc8d179b4d9088d9330b6c54ab89d4fb848907fc24f61618cb6f861d3e05ff94112e7ff3d2075faca582aac6ee9b80c7020080ff9a13d767052d5ffd330d545a7be75b9341d026e401514c424cfc9ba0107ab44d5d2de2c8e35cca29ffe667603f168a3d0f2d3d92af6da4161ecdf5f857cc41fd20ce327e46dbf90e4e583307e536fcea9192e97acbb766fa6727e6f5a27d981d73b9c42ebdf", @ANYRES32=0x0, @ANYBLOB="0c00990000800000560000000600950068070000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x10040) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) read$qrtrtun(r2, &(0x7f00000000c0)=""/112, 0x70) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r1) r4 = syz_open_dev$vcsn(&(0x7f0000000280), 0x8, 0x151043) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r5 = syz_open_dev$vcsu(&(0x7f00000005c0), 0x0, 0x208200) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x94, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x2]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x5dd, 0x2, 0xf4e9]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5a}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x8, 0xffff0dac, 0x7f, 0x5]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000815}, 0x40000804) 05:58:15 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (async, rerun: 64) r1 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x3, 0x0) (rerun: 64) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000010) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, 0xffffffffffffffff, 0x30, 0x1, @in={0x2, 0x4e22, @multicast2}}}, 0xa0) 05:58:15 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x3, 0x44741) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000000e070486ffb8d00e4135e40b6cfee9dd3011f08a4619102a556e0000000000000000", @ANYRES16=r3, @ANYBLOB="05042cbd7000fbdbdf255700000008000300da65f873a0520bc8d179b4d9088d9330b6c54ab89d4fb848907fc24f61618cb6f861d3e05ff94112e7ff3d2075faca582aac6ee9b80c7020080ff9a13d767052d5ffd330d545a7be75b9341d026e401514c424cfc9ba0107ab44d5d2de2c8e35cca29ffe667603f168a3d0f2d3d92af6da4161ecdf5f857cc41fd20ce327e46dbf90e4e583307e536fcea9192e97acbb766fa6727e6f5a27d981d73b9c42ebdf", @ANYRES32=0x0, @ANYBLOB="0c00990000800000560000000600950068070000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x10040) (async) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) (async) read$qrtrtun(r2, &(0x7f00000000c0)=""/112, 0x70) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r1) r4 = syz_open_dev$vcsn(&(0x7f0000000280), 0x8, 0x151043) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) (async) r5 = syz_open_dev$vcsu(&(0x7f00000005c0), 0x0, 0x208200) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x94, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x2]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x5dd, 0x2, 0xf4e9]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5a}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x8, 0xffff0dac, 0x7f, 0x5]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000815}, 0x40000804) 05:58:15 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000090000000000000001010000c2280100fcffffff185200000c00000000000000000000001841000002000000000000000000000095000000000000757e82040008000000000000002d01000018120000", @ANYRES32, @ANYBLOB="000000000000000018280000", @ANYRES32=r0, @ANYBLOB="00000000ff070000184200000800000000000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x8000, 0xc9, &(0x7f0000000380)=""/201, 0x41000, 0x1b, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xa, 0x3, 0x10001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r0]}, 0x80) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000600)={0xb25c}, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000a80)=0x15, 0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r3, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r3, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x34000880) r4 = syz_open_dev$vcsu(&(0x7f0000000200), 0x3e65530f, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r5) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xd4, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x18df, 0x4}}}}, [@NL80211_ATTR_IE={0xe, 0x2a, [@channel_switch={0x25, 0x3, {0x8d, 0xc, 0x2}}, @channel_switch={0x25, 0x3, {0x1, 0x3, 0x7}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x81, 0x2a, [@preq={0x82, 0x62, @ext={{}, 0x1, 0x7, 0x7f, @device_b, 0x8, @broadcast, 0x0, 0x7, 0x6, [{{0x1, 0x0, 0x1}, @device_a, 0xfc3}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_a, 0x10000}, {{0x0, 0x0, 0x1}, @device_a, 0x7}, {{}, @device_b, 0x7fff}, {{0x1}, @device_a, 0x8a7}]}}, @chsw_timing={0x68, 0x4, {0x0, 0x5}}, @tim={0x5, 0x11, {0xff, 0x15, 0xa0, "2c281d876fba9353ca08523a2fd3"}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4048080}, 0x4004000) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44080}, 0x4005884) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000240)={0xc, 0x8, 0xfa00, {&(0x7f0000000080)}}, 0x10) 05:58:15 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:15 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x3, 0x44741) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000000e070486ffb8d00e4135e40b6cfee9dd3011f08a4619102a556e0000000000000000", @ANYRES16=r3, @ANYBLOB="05042cbd7000fbdbdf255700000008000300da65f873a0520bc8d179b4d9088d9330b6c54ab89d4fb848907fc24f61618cb6f861d3e05ff94112e7ff3d2075faca582aac6ee9b80c7020080ff9a13d767052d5ffd330d545a7be75b9341d026e401514c424cfc9ba0107ab44d5d2de2c8e35cca29ffe667603f168a3d0f2d3d92af6da4161ecdf5f857cc41fd20ce327e46dbf90e4e583307e536fcea9192e97acbb766fa6727e6f5a27d981d73b9c42ebdf", @ANYRES32=0x0, @ANYBLOB="0c00990000800000560000000600950068070000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x10040) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) read$qrtrtun(r2, &(0x7f00000000c0)=""/112, 0x70) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r1) r4 = syz_open_dev$vcsn(&(0x7f0000000280), 0x8, 0x151043) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r5 = syz_open_dev$vcsu(&(0x7f00000005c0), 0x0, 0x208200) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x94, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x2]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x5dd, 0x2, 0xf4e9]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5a}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x8, 0xffff0dac, 0x7f, 0x5]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000815}, 0x40000804) syz_open_dev$vcsn(&(0x7f0000000080), 0x3, 0x44741) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000000e070486ffb8d00e4135e40b6cfee9dd3011f08a4619102a556e0000000000000000", @ANYRES16=r3, @ANYBLOB="05042cbd7000fbdbdf255700000008000300da65f873a0520bc8d179b4d9088d9330b6c54ab89d4fb848907fc24f61618cb6f861d3e05ff94112e7ff3d2075faca582aac6ee9b80c7020080ff9a13d767052d5ffd330d545a7be75b9341d026e401514c424cfc9ba0107ab44d5d2de2c8e35cca29ffe667603f168a3d0f2d3d92af6da4161ecdf5f857cc41fd20ce327e46dbf90e4e583307e536fcea9192e97acbb766fa6727e6f5a27d981d73b9c42ebdf", @ANYRES32=0x0, @ANYBLOB="0c00990000800000560000000600950068070000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x10040) (async) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) (async) read$qrtrtun(r2, &(0x7f00000000c0)=""/112, 0x70) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r1) (async) syz_open_dev$vcsn(&(0x7f0000000280), 0x8, 0x151043) (async) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) (async) syz_open_dev$vcsu(&(0x7f00000005c0), 0x0, 0x208200) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r0) (async) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x94, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x2]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x5dd, 0x2, 0xf4e9]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5a}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x8, 0xffff0dac, 0x7f, 0x5]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000815}, 0x40000804) (async) 05:58:15 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:15 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000090000000000000001010000c2280100fcffffff185200000c00000000000000000000001841000002000000000000000000000095000000000000757e82040008000000000000002d01000018120000", @ANYRES32, @ANYBLOB="000000000000000018280000", @ANYRES32=r0, @ANYBLOB="00000000ff070000184200000800000000000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x8000, 0xc9, &(0x7f0000000380)=""/201, 0x41000, 0x1b, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xa, 0x3, 0x10001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r0]}, 0x80) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000600)={0xb25c}, 0x8) (async) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000a80)=0x15, 0x4) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r3, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r3, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x34000880) r4 = syz_open_dev$vcsu(&(0x7f0000000200), 0x3e65530f, 0x80) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r5) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xd4, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x18df, 0x4}}}}, [@NL80211_ATTR_IE={0xe, 0x2a, [@channel_switch={0x25, 0x3, {0x8d, 0xc, 0x2}}, @channel_switch={0x25, 0x3, {0x1, 0x3, 0x7}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x81, 0x2a, [@preq={0x82, 0x62, @ext={{}, 0x1, 0x7, 0x7f, @device_b, 0x8, @broadcast, 0x0, 0x7, 0x6, [{{0x1, 0x0, 0x1}, @device_a, 0xfc3}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_a, 0x10000}, {{0x0, 0x0, 0x1}, @device_a, 0x7}, {{}, @device_b, 0x7fff}, {{0x1}, @device_a, 0x8a7}]}}, @chsw_timing={0x68, 0x4, {0x0, 0x5}}, @tim={0x5, 0x11, {0xff, 0x15, 0xa0, "2c281d876fba9353ca08523a2fd3"}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4048080}, 0x4004000) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44080}, 0x4005884) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000240)={0xc, 0x8, 0xfa00, {&(0x7f0000000080)}}, 0x10) 05:58:15 executing program 3: io_uring_setup(0x62a, &(0x7f0000000000)={0x0, 0x298a, 0x8, 0x2, 0x2a8}) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) 05:58:15 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:15 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:15 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000090000000000000001010000c2280100fcffffff185200000c00000000000000000000001841000002000000000000000000000095000000000000757e82040008000000000000002d01000018120000", @ANYRES32, @ANYBLOB="000000000000000018280000", @ANYRES32=r0, @ANYBLOB="00000000ff070000184200000800000000000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x8000, 0xc9, &(0x7f0000000380)=""/201, 0x41000, 0x1b, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xa, 0x3, 0x10001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r0]}, 0x80) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000600)={0xb25c}, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000a80)=0x15, 0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r3, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r3, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x34000880) r4 = syz_open_dev$vcsu(&(0x7f0000000200), 0x3e65530f, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r5) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xd4, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x18df, 0x4}}}}, [@NL80211_ATTR_IE={0xe, 0x2a, [@channel_switch={0x25, 0x3, {0x8d, 0xc, 0x2}}, @channel_switch={0x25, 0x3, {0x1, 0x3, 0x7}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x81, 0x2a, [@preq={0x82, 0x62, @ext={{}, 0x1, 0x7, 0x7f, @device_b, 0x8, @broadcast, 0x0, 0x7, 0x6, [{{0x1, 0x0, 0x1}, @device_a, 0xfc3}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_a, 0x10000}, {{0x0, 0x0, 0x1}, @device_a, 0x7}, {{}, @device_b, 0x7fff}, {{0x1}, @device_a, 0x8a7}]}}, @chsw_timing={0x68, 0x4, {0x0, 0x5}}, @tim={0x5, 0x11, {0xff, 0x15, 0xa0, "2c281d876fba9353ca08523a2fd3"}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4048080}, 0x4004000) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44080}, 0x4005884) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000240)={0xc, 0x8, 0xfa00, {&(0x7f0000000080)}}, 0x10) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vxcan1\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000090000000000000001010000c2280100fcffffff185200000c00000000000000000000001841000002000000000000000000000095000000000000757e82040008000000000000002d01000018120000", @ANYRES32, @ANYBLOB="000000000000000018280000", @ANYRES32=r0, @ANYBLOB="00000000ff070000184200000800000000000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x8000, 0xc9, &(0x7f0000000380)=""/201, 0x41000, 0x1b, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xa, 0x3, 0x10001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r0]}, 0x80) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000600)={0xb25c}, 0x8) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000a80)=0x15, 0x4) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r3, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r3, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x34000880) (async) syz_open_dev$vcsu(&(0x7f0000000200), 0x3e65530f, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r5) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xd4, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x18df, 0x4}}}}, [@NL80211_ATTR_IE={0xe, 0x2a, [@channel_switch={0x25, 0x3, {0x8d, 0xc, 0x2}}, @channel_switch={0x25, 0x3, {0x1, 0x3, 0x7}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x81, 0x2a, [@preq={0x82, 0x62, @ext={{}, 0x1, 0x7, 0x7f, @device_b, 0x8, @broadcast, 0x0, 0x7, 0x6, [{{0x1, 0x0, 0x1}, @device_a, 0xfc3}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_a, 0x10000}, {{0x0, 0x0, 0x1}, @device_a, 0x7}, {{}, @device_b, 0x7fff}, {{0x1}, @device_a, 0x8a7}]}}, @chsw_timing={0x68, 0x4, {0x0, 0x5}}, @tim={0x5, 0x11, {0xff, 0x15, 0xa0, "2c281d876fba9353ca08523a2fd3"}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4048080}, 0x4004000) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44080}, 0x4005884) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000240)={0xc, 0x8, 0xfa00, {&(0x7f0000000080)}}, 0x10) (async) 05:58:15 executing program 3: io_uring_setup(0x62a, &(0x7f0000000000)={0x0, 0x298a, 0x8, 0x2, 0x2a8}) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) 05:58:15 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:15 executing program 3: io_uring_setup(0x62a, &(0x7f0000000000)={0x0, 0x298a, 0x8, 0x2, 0x2a8}) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) io_uring_setup(0x62a, &(0x7f0000000000)={0x0, 0x298a, 0x8, 0x2, 0x2a8}) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) 05:58:15 executing program 3: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xff) write$char_usb(r0, &(0x7f0000001240)="ffa1a78293a46f6ac532ffbb008afa3732063f6a5bb5487ed1f204009179b2c0dc066a6916e2783a2d07942afd7054d6d5ddadcced69c7d7fdddcc287b31b2b81a9404f2b419e43ee61fac0224eef467bbaeaa9a1cfc2f36523ddbd81ce78229a214289cf75c3e9a945dd77ff9162d0222862965aaea7a29ff8d79f3a2f503cc75eb", 0x82) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x4004000) recvmsg$can_j1939(r1, &(0x7f0000001100)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1}, 0x40000020) 05:58:15 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:15 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:15 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:15 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:15 executing program 3: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xff) write$char_usb(r0, &(0x7f0000001240)="ffa1a78293a46f6ac532ffbb008afa3732063f6a5bb5487ed1f204009179b2c0dc066a6916e2783a2d07942afd7054d6d5ddadcced69c7d7fdddcc287b31b2b81a9404f2b419e43ee61fac0224eef467bbaeaa9a1cfc2f36523ddbd81ce78229a214289cf75c3e9a945dd77ff9162d0222862965aaea7a29ff8d79f3a2f503cc75eb", 0x82) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x4004000) (async, rerun: 64) recvmsg$can_j1939(r1, &(0x7f0000001100)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1}, 0x40000020) (rerun: 64) 05:58:15 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:15 executing program 3: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xff) write$char_usb(r0, &(0x7f0000001240)="ffa1a78293a46f6ac532ffbb008afa3732063f6a5bb5487ed1f204009179b2c0dc066a6916e2783a2d07942afd7054d6d5ddadcced69c7d7fdddcc287b31b2b81a9404f2b419e43ee61fac0224eef467bbaeaa9a1cfc2f36523ddbd81ce78229a214289cf75c3e9a945dd77ff9162d0222862965aaea7a29ff8d79f3a2f503cc75eb", 0x82) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x4004000) (async) recvmsg$can_j1939(r1, &(0x7f0000001100)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1}, 0x40000020) 05:58:15 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x3, 0xffffffffffffffff, 0x3c, 0x1, @in={0x2, 0x4e20, @loopback}}}, 0xa0) syz_open_dev$vcsn(&(0x7f0000000080), 0xfffffffffffffffc, 0x44741) 05:58:15 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x3, 0xffffffffffffffff, 0x3c, 0x1, @in={0x2, 0x4e20, @loopback}}}, 0xa0) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0xfffffffffffffffc, 0x44741) 05:58:15 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x3, 0xffffffffffffffff, 0x3c, 0x1, @in={0x2, 0x4e20, @loopback}}}, 0xa0) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0xfffffffffffffffc, 0x44741) 05:58:15 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) r1 = socket(0x33, 0xa, 0x81) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r4) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x8480, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r8) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$NL80211_CMD_LEAVE_MESH(r8, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) write$RDMA_USER_CM_CMD_DISCONNECT(r6, &(0x7f00000002c0)={0xa, 0x4, 0xfa00, {r7}}, 0xc) r10 = syz_open_dev$vcsn(&(0x7f00000001c0), 0xde, 0x40200) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r10) 05:58:15 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:15 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) (async) r1 = socket(0x33, 0xa, 0x81) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r4) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x8480, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r8) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$NL80211_CMD_LEAVE_MESH(r8, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) write$RDMA_USER_CM_CMD_DISCONNECT(r6, &(0x7f00000002c0)={0xa, 0x4, 0xfa00, {r7}}, 0xc) r10 = syz_open_dev$vcsn(&(0x7f00000001c0), 0xde, 0x40200) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r10) 05:58:15 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:15 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:15 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:15 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) (async) r1 = socket(0x33, 0xa, 0x81) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r4) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x8480, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r8) (async, rerun: 64) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) (rerun: 64) sendmsg$NL80211_CMD_LEAVE_MESH(r8, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r6, &(0x7f00000002c0)={0xa, 0x4, 0xfa00, {r7}}, 0xc) (async) r10 = syz_open_dev$vcsn(&(0x7f00000001c0), 0xde, 0x40200) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r10) 05:58:15 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:15 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:15 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000000000000000, 0x505304) syz_open_dev$usbmon(&(0x7f0000000300), 0x0, 0x200080) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xd6c}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x5c}}, 0xc090) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x20, 0x26}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) 05:58:15 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000000000000000, 0x505304) syz_open_dev$usbmon(&(0x7f0000000300), 0x0, 0x200080) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xd6c}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x5c}}, 0xc090) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x20, 0x26}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) 05:58:15 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000000000000000, 0x505304) (async) syz_open_dev$usbmon(&(0x7f0000000300), 0x0, 0x200080) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xd6c}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x5c}}, 0xc090) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x20, 0x26}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) 05:58:15 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f00000000c0)=0x2, 0x4) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) process_madvise(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="0f59ebcc988d6608bcee6a29a497854c8c78f42fb812adf7b45e107268063c9ab6f2d78232f690dfa91ec2979e6add39a00877", 0x33}], 0x1, 0x4, 0x0) 05:58:15 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) (async) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f00000000c0)=0x2, 0x4) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) (async) process_madvise(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="0f59ebcc988d6608bcee6a29a497854c8c78f42fb812adf7b45e107268063c9ab6f2d78232f690dfa91ec2979e6add39a00877", 0x33}], 0x1, 0x4, 0x0) 05:58:15 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) (async, rerun: 64) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f00000000c0)=0x2, 0x4) (async, rerun: 64) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, 0x0, 0x0) (async, rerun: 32) process_madvise(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="0f59ebcc988d6608bcee6a29a497854c8c78f42fb812adf7b45e107268063c9ab6f2d78232f690dfa91ec2979e6add39a00877", 0x33}], 0x1, 0x4, 0x0) (rerun: 32) 05:58:15 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:15 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) 05:58:15 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) 05:58:15 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:15 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:15 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:15 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) 05:58:15 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) 05:58:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r1, 0x0) 05:58:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r1, 0x0) 05:58:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r1, 0x0) 05:58:16 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000004caf14e13cd00325e44d21352d928b851f3f1b2008f86cb786bbb3602b9798c3084f7b0d0a88eac000000000000000000", @ANYRES16=r1, @ANYBLOB="000325bd7000fedbdf25510000000a000600080211000000000005008a00010000000a0006000802110000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4004840}, 0x4004004) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) 05:58:16 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:16 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000004caf14e13cd00325e44d21352d928b851f3f1b2008f86cb786bbb3602b9798c3084f7b0d0a88eac000000000000000000", @ANYRES16=r1, @ANYBLOB="000325bd7000fedbdf25510000000a000600080211000000000005008a00010000000a0006000802110000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4004840}, 0x4004004) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) 05:58:16 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:16 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:16 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:16 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 05:58:16 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000004caf14e13cd00325e44d21352d928b851f3f1b2008f86cb786bbb3602b9798c3084f7b0d0a88eac000000000000000000", @ANYRES16=r1, @ANYBLOB="000325bd7000fedbdf25510000000a000600080211000000000005008a00010000000a0006000802110000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4004840}, 0x4004004) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) 05:58:16 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x64, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x10fd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x4fc}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb9a}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x18f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x8}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000804}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r2, 0x7}}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000000240), 0x7, 0x200200) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x74}, 0x1, 0x0, 0x0, 0x8004}, 0x48010) 05:58:16 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x64, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x10fd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x4fc}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb9a}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x18f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x8}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000804}, 0x10) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r2, 0x7}}, 0x10) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000240), 0x7, 0x200200) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x74}, 0x1, 0x0, 0x0, 0x8004}, 0x48010) 05:58:16 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x64, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x10fd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x4fc}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb9a}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x18f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x8}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000804}, 0x10) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000b80)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r2, 0x7}}, 0x10) (async, rerun: 32) r3 = syz_open_dev$vcsn(&(0x7f0000000240), 0x7, 0x200200) (rerun: 32) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x74}, 0x1, 0x0, 0x0, 0x8004}, 0x48010) 05:58:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x46}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x200000c5) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, &(0x7f00000000c0)) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) 05:58:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x46}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x200000c5) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, &(0x7f00000000c0)) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x46}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x200000c5) (async) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, &(0x7f00000000c0)) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) 05:58:16 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x46}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x200000c5) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, &(0x7f00000000c0)) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x46}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x200000c5) (async) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, &(0x7f00000000c0)) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) 05:58:16 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:16 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 05:58:16 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:16 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:16 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}], 0x20) 05:58:16 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}], 0x20) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}], 0x20) (async) 05:58:16 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}], 0x20) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}], 0x20) (async) 05:58:16 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x400000000000006, 0x48741) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r1, 0x5, 0x18}, 0xc) process_mrelease(r0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x20c0, 0x0) sendmsg$xdp(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, 0xd, r2, 0xb}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="908eee6564f2960f92948da2f63a4a7156b860d0fcd4cb84e43e92ddae957fb24d", 0x21}], 0x1, 0x0, 0x0, 0x8000}, 0x88c1) 05:58:16 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:16 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:16 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:16 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:16 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:16 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 05:58:16 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x400000000000006, 0x48741) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r1, 0x5, 0x18}, 0xc) process_mrelease(r0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x20c0, 0x0) sendmsg$xdp(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, 0xd, r2, 0xb}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="908eee6564f2960f92948da2f63a4a7156b860d0fcd4cb84e43e92ddae957fb24d", 0x21}], 0x1, 0x0, 0x0, 0x8000}, 0x88c1) syz_open_dev$vcsn(&(0x7f0000000040), 0x400000000000006, 0x48741) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000080)}, 0x10) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r1, 0x5, 0x18}, 0xc) (async) process_mrelease(r0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x20c0, 0x0) (async) sendmsg$xdp(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, 0xd, r2, 0xb}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="908eee6564f2960f92948da2f63a4a7156b860d0fcd4cb84e43e92ddae957fb24d", 0x21}], 0x1, 0x0, 0x0, 0x8000}, 0x88c1) (async) 05:58:16 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x400000000000006, 0x48741) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r1, 0x5, 0x18}, 0xc) process_mrelease(r0, 0x0) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x20c0, 0x0) sendmsg$xdp(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, 0xd, r2, 0xb}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="908eee6564f2960f92948da2f63a4a7156b860d0fcd4cb84e43e92ddae957fb24d", 0x21}], 0x1, 0x0, 0x0, 0x8000}, 0x88c1) 05:58:16 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x40040) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) 05:58:16 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x40040) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x40040) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) 05:58:16 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x40040) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x40040) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) 05:58:16 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x1}, 0x10) 05:58:16 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x1}, 0x10) [ 666.256549][ T24] audit: type=1400 audit(1653544696.774:200): avc: denied { connect } for pid=21680 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 05:58:17 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:17 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x1}, 0x10) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) socket$l2tp(0x2, 0x2, 0x73) (async) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x1}, 0x10) (async) 05:58:17 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:17 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:17 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:17 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) 05:58:17 executing program 3: r0 = syz_clone(0x82000, &(0x7f0000000000)="da0e54031c159d12db6756b8abd09183bc2919e3892ae5ce192003dae76b1b79fee0bbd1d4", 0x25, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)="3b9c0877e0f29b3d7c0f5188dc667eff1978415417f797f4586dde4a") ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) getpgrp(r0) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) 05:58:17 executing program 3: r0 = syz_clone(0x82000, &(0x7f0000000000)="da0e54031c159d12db6756b8abd09183bc2919e3892ae5ce192003dae76b1b79fee0bbd1d4", 0x25, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)="3b9c0877e0f29b3d7c0f5188dc667eff1978415417f797f4586dde4a") ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) getpgrp(r0) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) syz_clone(0x82000, &(0x7f0000000000)="da0e54031c159d12db6756b8abd09183bc2919e3892ae5ce192003dae76b1b79fee0bbd1d4", 0x25, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)="3b9c0877e0f29b3d7c0f5188dc667eff1978415417f797f4586dde4a") (async) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) (async) getpgrp(r0) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) 05:58:17 executing program 3: r0 = syz_clone(0x82000, &(0x7f0000000000)="da0e54031c159d12db6756b8abd09183bc2919e3892ae5ce192003dae76b1b79fee0bbd1d4", 0x25, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)="3b9c0877e0f29b3d7c0f5188dc667eff1978415417f797f4586dde4a") ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) (async) getpgrp(r0) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) 05:58:17 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000079e3a917fa91fdbf5b02ec3d04b422e67168e3d51a40c730c48ee038a9c58564ec9b82069f2b620ce238f95dfd48", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf258800000008000300", @ANYRES32=0x0, @ANYBLOB="0a0006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x20004880}, 0x80) 05:58:17 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000079e3a917fa91fdbf5b02ec3d04b422e67168e3d51a40c730c48ee038a9c58564ec9b82069f2b620ce238f95dfd48", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf258800000008000300", @ANYRES32=0x0, @ANYBLOB="0a0006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x20004880}, 0x80) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000079e3a917fa91fdbf5b02ec3d04b422e67168e3d51a40c730c48ee038a9c58564ec9b82069f2b620ce238f95dfd48", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf258800000008000300", @ANYRES32=0x0, @ANYBLOB="0a0006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x20004880}, 0x80) (async) 05:58:17 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000079e3a917fa91fdbf5b02ec3d04b422e67168e3d51a40c730c48ee038a9c58564ec9b82069f2b620ce238f95dfd48", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf258800000008000300", @ANYRES32=0x0, @ANYBLOB="0a0006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x20004880}, 0x80) 05:58:17 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:17 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x25, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008010) 05:58:17 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:17 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) 05:58:17 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:17 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:17 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x25, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008010) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x25, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008010) (async) 05:58:17 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x25, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008010) 05:58:17 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:17 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:17 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:17 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:17 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:17 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) 05:58:17 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:17 executing program 1: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r0 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:17 executing program 1: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r0 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:17 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) 05:58:17 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:17 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:17 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:17 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:17 executing program 1: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r0 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:17 executing program 1: r0 = syz_open_dev$vcsn(0x0, 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:17 executing program 1: r0 = syz_open_dev$vcsn(0x0, 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:17 executing program 1: r0 = syz_open_dev$vcsn(0x0, 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:17 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:17 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) 05:58:17 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:17 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:17 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x1}, 0x10) 05:58:17 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:17 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x1}, 0x10) 05:58:17 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x1}, 0x10) 05:58:17 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x1}, 0x10) 05:58:17 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:17 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x1}, 0x10) 05:58:17 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x1}, 0x10) 05:58:17 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:17 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x0, 0x0, 0x6) 05:58:17 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:17 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x1}, 0x10) 05:58:17 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:17 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:17 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:17 executing program 3: socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x1}, 0x10) 05:58:17 executing program 3: socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x1}, 0x10) 05:58:17 executing program 1: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r0 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:17 executing program 3: socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x1}, 0x10) 05:58:18 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, 0x0, 0x0) 05:58:18 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, 0x0, 0x0) 05:58:18 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x0, 0x0, 0x6) 05:58:18 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, 0x0, 0x0) 05:58:18 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:18 executing program 1: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r0 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:18 executing program 4: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r0 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:18 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:18 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) 05:58:18 executing program 4: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r0 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:18 executing program 1: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r0 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:18 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r0 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:18 executing program 4: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r0 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:18 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) r1 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:18 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) 05:58:18 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:18 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:18 executing program 4: r0 = syz_open_dev$vcsn(0x0, 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:18 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) r1 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:18 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:18 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) r1 = socket(0x0, 0x0, 0x6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:18 executing program 4: r0 = syz_open_dev$vcsn(0x0, 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:18 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:18 executing program 4: r0 = syz_open_dev$vcsn(0x0, 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:18 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:18 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:18 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:18 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:18 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:18 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:18 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:18 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:18 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) 05:58:18 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) 05:58:18 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:18 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:18 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:18 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:18 executing program 5: syz_open_dev$vcsn(0x0, 0x8000, 0xa8601) 05:58:18 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:18 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) 05:58:18 executing program 5: syz_open_dev$vcsn(0x0, 0x8000, 0xa8601) 05:58:18 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:18 executing program 5: syz_open_dev$vcsn(0x0, 0x8000, 0xa8601) 05:58:18 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:18 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) 05:58:18 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:19 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:19 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) 05:58:19 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) 05:58:19 executing program 2: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r0 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:19 executing program 2: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r0 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:19 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:19 executing program 2: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r0 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:19 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:19 executing program 2: r0 = syz_open_dev$vcsn(0x0, 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:19 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) 05:58:19 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) 05:58:19 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) 05:58:19 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:19 executing program 2: r0 = syz_open_dev$vcsn(0x0, 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:19 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:19 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) 05:58:19 executing program 2: r0 = syz_open_dev$vcsn(0x0, 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:19 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:19 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:19 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:19 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:19 executing program 0: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:19 executing program 0: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:19 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:19 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:19 executing program 0: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:19 executing program 0: r0 = syz_open_dev$vcsn(0x0, 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:19 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:19 executing program 0: r0 = syz_open_dev$vcsn(0x0, 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:19 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:19 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:19 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:19 executing program 0: r0 = syz_open_dev$vcsn(0x0, 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:19 executing program 3: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:19 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:19 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:19 executing program 3: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:19 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:19 executing program 3: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:19 executing program 3: r0 = syz_open_dev$vcsn(0x0, 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:19 executing program 3: r0 = syz_open_dev$vcsn(0x0, 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:19 executing program 3: r0 = syz_open_dev$vcsn(0x0, 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:19 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:19 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:19 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:20 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:20 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:20 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 05:58:20 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:20 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:20 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:20 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:20 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:20 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) 05:58:20 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:20 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:20 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(0x0, 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:20 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:20 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:20 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:20 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:20 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:20 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) 05:58:20 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:20 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x40044000) 05:58:20 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:20 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) 05:58:20 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:20 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:20 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(0x0, 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:20 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:20 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:20 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:20 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:20 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) 05:58:20 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) 05:58:20 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:20 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(0x0, 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:20 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:20 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) [ 670.291568][T22257] ================================================================== [ 670.299677][T22257] BUG: KCSAN: data-race in __percpu_counter_compare / percpu_counter_add_batch [ 670.308617][T22257] [ 670.310930][T22257] read-write to 0xffff888101071e50 of 8 bytes by task 22260 on cpu 1: [ 670.319083][T22257] percpu_counter_add_batch+0x9a/0x110 [ 670.324549][T22257] shmem_alloc_and_acct_page+0x188/0x580 [ 670.330187][T22257] shmem_getpage_gfp+0x300/0x16c0 [ 670.335211][T22257] shmem_write_begin+0x84/0x110 [ 670.340060][T22257] generic_perform_write+0x1d4/0x3f0 [ 670.345340][T22257] __generic_file_write_iter+0xe3/0x280 [ 670.350888][T22257] generic_file_write_iter+0x75/0x130 [ 670.356259][T22257] vfs_write+0x71c/0x890 [ 670.360488][T22257] ksys_write+0xe8/0x1a0 [ 670.364721][T22257] __x64_sys_write+0x3e/0x50 [ 670.369292][T22257] do_syscall_64+0x2b/0x70 [ 670.373686][T22257] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 670.379558][T22257] [ 670.381858][T22257] read to 0xffff888101071e50 of 8 bytes by task 22257 on cpu 0: [ 670.389462][T22257] __percpu_counter_compare+0x27/0x1a0 [ 670.394907][T22257] shmem_alloc_and_acct_page+0x115/0x580 [ 670.400528][T22257] shmem_getpage_gfp+0x300/0x16c0 [ 670.405560][T22257] shmem_write_begin+0x84/0x110 [ 670.410399][T22257] generic_perform_write+0x1d4/0x3f0 [ 670.415685][T22257] __generic_file_write_iter+0xe3/0x280 [ 670.421210][T22257] generic_file_write_iter+0x75/0x130 [ 670.426560][T22257] vfs_write+0x71c/0x890 [ 670.430782][T22257] ksys_write+0xe8/0x1a0 [ 670.435006][T22257] __x64_sys_write+0x3e/0x50 [ 670.439575][T22257] do_syscall_64+0x2b/0x70 [ 670.443967][T22257] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 670.449840][T22257] [ 670.452151][T22257] value changed: 0x000000000000ba64 -> 0x000000000000ba84 [ 670.459243][T22257] [ 670.461541][T22257] Reported by Kernel Concurrency Sanitizer on: [ 670.467664][T22257] CPU: 0 PID: 22257 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-02752-gfdaf9a5840ac-dirty #0 [ 670.478309][T22257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 05:58:21 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:21 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:21 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) [ 670.488345][T22257] ================================================================== 05:58:21 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(0x0, 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:21 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 05:58:21 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:21 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:21 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(0x0, 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:21 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) 05:58:21 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:21 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 05:58:21 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(0x0, 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:21 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(0x0, 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:21 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:21 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) 05:58:21 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(0x0, 0x6, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:21 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 05:58:21 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:21 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:21 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(0x0, 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:21 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x0, 0x0, 0x6) 05:58:21 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) 05:58:21 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:21 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:21 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:21 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) 05:58:21 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) 05:58:21 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:21 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) 05:58:21 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:21 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x0) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:21 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:21 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) 05:58:22 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:22 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x0) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:22 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) 05:58:22 executing program 5: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:22 executing program 5: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:22 executing program 5: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:22 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(0x0, 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:22 executing program 5: r0 = syz_open_dev$vcsn(0x0, 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:22 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:22 executing program 5: r0 = syz_open_dev$vcsn(0x0, 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:22 executing program 5: r0 = syz_open_dev$vcsn(0x0, 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:22 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:22 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:22 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:22 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) 05:58:22 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x0) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:22 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:22 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:22 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:22 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:22 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:22 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:22 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x0, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:22 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:22 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) 05:58:22 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:22 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:22 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:22 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:22 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:22 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:22 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) 05:58:22 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:22 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:22 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x0, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:22 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x0) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:22 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:22 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x0, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:22 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:23 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:23 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:23 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x0, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:23 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x0) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:23 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:23 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 05:58:23 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x0, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:23 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x0) socket(0x27, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:23 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) 05:58:23 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:23 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:23 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) 05:58:23 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 05:58:23 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:23 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x0, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:23 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x0, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:23 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 05:58:23 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:23 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:23 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) 05:58:23 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x0, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:23 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:23 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:23 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) socket(0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:23 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:23 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:23 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:23 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) socket(0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:23 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x0, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:23 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:23 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:24 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:24 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:24 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x0, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:24 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:24 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:24 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:24 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:24 executing program 1: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r0 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:24 executing program 1: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r0 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:24 executing program 1: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r0 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:24 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:24 executing program 1: r0 = syz_open_dev$vcsn(0x0, 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:24 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x0, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:24 executing program 1: r0 = syz_open_dev$vcsn(0x0, 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:24 executing program 1: r0 = syz_open_dev$vcsn(0x0, 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:24 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x0, 0x6, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:24 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:24 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:24 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:24 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:24 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:24 executing program 1: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r0 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:24 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:24 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:24 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x0, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:24 executing program 1: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r0 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:24 executing program 1: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r0 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:24 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:24 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:24 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:24 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:24 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:24 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:24 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:24 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:24 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:24 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:24 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:24 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:24 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:24 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x40044000) 05:58:25 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:25 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x40044000) 05:58:25 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:25 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:25 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:25 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:25 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:25 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:25 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:25 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:25 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:25 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x40044000) 05:58:25 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:25 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:25 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:25 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:25 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:25 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:25 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:25 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:25 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:25 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:25 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:25 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:25 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:25 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:25 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:25 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) [ 675.381471][T22883] ================================================================== [ 675.389590][T22883] BUG: KCSAN: data-race in __percpu_counter_compare / percpu_counter_add_batch [ 675.398538][T22883] [ 675.400862][T22883] read-write to 0xffff888101071e50 of 8 bytes by task 22877 on cpu 1: [ 675.409009][T22883] percpu_counter_add_batch+0x9a/0x110 [ 675.414481][T22883] shmem_undo_range+0x1017/0x1160 [ 675.419513][T22883] shmem_truncate_range+0x27/0x70 [ 675.424541][T22883] shmem_setattr+0x376/0x410 [ 675.429520][T22883] notify_change+0x9c3/0xa30 [ 675.434109][T22883] do_truncate+0xf7/0x140 [ 675.438436][T22883] path_openat+0x1834/0x1b30 [ 675.443033][T22883] do_filp_open+0x105/0x220 [ 675.447537][T22883] do_sys_openat2+0xb5/0x2a0 [ 675.452125][T22883] __x64_sys_openat+0xef/0x110 [ 675.456888][T22883] do_syscall_64+0x2b/0x70 [ 675.461302][T22883] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 675.467199][T22883] [ 675.469511][T22883] read to 0xffff888101071e50 of 8 bytes by task 22883 on cpu 0: 05:58:25 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) 05:58:26 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) [ 675.477128][T22883] __percpu_counter_compare+0x27/0x1a0 [ 675.482593][T22883] shmem_alloc_and_acct_page+0x115/0x580 [ 675.488230][T22883] shmem_getpage_gfp+0x300/0x16c0 [ 675.493258][T22883] shmem_write_begin+0x84/0x110 [ 675.498108][T22883] generic_perform_write+0x1d4/0x3f0 [ 675.503389][T22883] __generic_file_write_iter+0xe3/0x280 [ 675.508940][T22883] generic_file_write_iter+0x75/0x130 [ 675.514320][T22883] vfs_write+0x71c/0x890 [ 675.518565][T22883] ksys_write+0xe8/0x1a0 [ 675.522817][T22883] __x64_sys_write+0x3e/0x50 [ 675.527410][T22883] do_syscall_64+0x2b/0x70 [ 675.531823][T22883] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 675.537729][T22883] [ 675.540041][T22883] value changed: 0x000000000000b587 -> 0x000000000000a593 [ 675.547134][T22883] [ 675.549446][T22883] Reported by Kernel Concurrency Sanitizer on: [ 675.555587][T22883] CPU: 0 PID: 22883 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-02752-gfdaf9a5840ac-dirty #0 [ 675.566256][T22883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 05:58:26 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) [ 675.576303][T22883] ================================================================== 05:58:26 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:26 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680), 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:26 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:26 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) 05:58:26 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:26 executing program 5: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7fffffff, 0x1, "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", 0x5, 0x3, 0x5, 0x3f, 0x30, 0x6, 0x1, 0x1}}}, 0x120) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = socket(0x21, 0x804, 0xf708) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001000080e20000000a000653d24a4e7537bc552683b166f5a23e0b00"], 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x20004044) 05:58:26 executing program 5: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7fffffff, 0x1, "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", 0x5, 0x3, 0x5, 0x3f, 0x30, 0x6, 0x1, 0x1}}}, 0x120) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = socket(0x21, 0x804, 0xf708) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001000080e20000000a000653d24a4e7537bc552683b166f5a23e0b00"], 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x20004044) 05:58:26 executing program 5: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7fffffff, 0x1, "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", 0x5, 0x3, 0x5, 0x3f, 0x30, 0x6, 0x1, 0x1}}}, 0x120) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = socket(0x21, 0x804, 0xf708) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001000080e20000000a000653d24a4e7537bc552683b166f5a23e0b00"], 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x20004044) 05:58:26 executing program 5: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7fffffff, 0x1, "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", 0x5, 0x3, 0x5, 0x3f, 0x30, 0x6, 0x1, 0x1}}}, 0x120) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) socket(0x21, 0x804, 0xf708) 05:58:26 executing program 5: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7fffffff, 0x1, "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", 0x5, 0x3, 0x5, 0x3f, 0x30, 0x6, 0x1, 0x1}}}, 0x120) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) r0 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 05:58:26 executing program 5: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7fffffff, 0x1, "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", 0x5, 0x3, 0x5, 0x3f, 0x30, 0x6, 0x1, 0x1}}}, 0x120) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 05:58:26 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:26 executing program 5: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7fffffff, 0x1, "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", 0x5, 0x3, 0x5, 0x3f, 0x30, 0x6, 0x1, 0x1}}}, 0x120) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 05:58:26 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680), 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:26 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:26 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:26 executing program 5: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7fffffff, 0x1, "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", 0x5, 0x3, 0x5, 0x3f, 0x30, 0x6, 0x1, 0x1}}}, 0x120) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44741) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 05:58:26 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:26 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:26 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680), 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:26 executing program 5: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7fffffff, 0x1, "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", 0x5, 0x3, 0x5, 0x3f, 0x30, 0x6, 0x1, 0x1}}}, 0x120) r0 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 05:58:26 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 05:58:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 05:58:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 05:58:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 05:58:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(0x0, r0) 05:58:26 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:26 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) 05:58:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(0x0, r0) 05:58:26 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:26 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(0x0, r0) 05:58:26 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:26 executing program 5: socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 05:58:26 executing program 5: socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 05:58:26 executing program 5: socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 05:58:26 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:26 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, 0x0}, 0x40044000) 05:58:27 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:27 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:27 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:27 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780), 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:27 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:27 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, 0x0}, 0x40044000) 05:58:27 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780), 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:27 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:27 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:27 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:27 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780), 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:27 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) 05:58:27 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:27 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={0x0}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:27 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780), 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:27 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780), 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:27 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:27 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) 05:58:27 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780), 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:27 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x301400, 0x0) r2 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r2) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf250500000008001700", @ANYRES32=r2, @ANYBLOB="06001d008800000006001b004e230000080011000100000006000300ff0300000500210001000000050014000200000006001a004e240000f1636df2156dfae15964f88e0c4efc0fdb7b26262da0b7f9732b3ff43b999d3b9838b6b5777e0f2905e1ea7c234b2f07f63ae1ef1ae36cfccb119f0b2029bd6028b1303fbc5909"], 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r4, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:27 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:27 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={0x0}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:27 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:27 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:27 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) 05:58:27 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x301400, 0x0) r2 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r2) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf250500000008001700", @ANYRES32=r2, @ANYBLOB="06001d008800000006001b004e230000080011000100000006000300ff0300000500210001000000050014000200000006001a004e240000f1636df2156dfae15964f88e0c4efc0fdb7b26262da0b7f9732b3ff43b999d3b9838b6b5777e0f2905e1ea7c234b2f07f63ae1ef1ae36cfccb119f0b2029bd6028b1303fbc5909"], 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r4, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:27 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:27 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={0x0}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:28 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:28 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x301400, 0x0) r2 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r2) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf250500000008001700", @ANYRES32=r2, @ANYBLOB="06001d008800000006001b004e230000080011000100000006000300ff0300000500210001000000050014000200000006001a004e240000f1636df2156dfae15964f88e0c4efc0fdb7b26262da0b7f9732b3ff43b999d3b9838b6b5777e0f2905e1ea7c234b2f07f63ae1ef1ae36cfccb119f0b2029bd6028b1303fbc5909"], 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r4, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) 05:58:28 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:28 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:28 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:28 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={0x0}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:28 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x301400, 0x0) r2 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r2) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf250500000008001700", @ANYRES32=r2, @ANYBLOB="06001d008800000006001b004e230000080011000100000006000300ff0300000500210001000000050014000200000006001a004e240000f1636df2156dfae15964f88e0c4efc0fdb7b26262da0b7f9732b3ff43b999d3b9838b6b5777e0f2905e1ea7c234b2f07f63ae1ef1ae36cfccb119f0b2029bd6028b1303fbc5909"], 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r4, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x401) 05:58:28 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={0x0}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x301400, 0x0) r2 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r2) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf250500000008001700", @ANYRES32=r2, @ANYBLOB="06001d008800000006001b004e230000080011000100000006000300ff0300000500210001000000050014000200000006001a004e240000f1636df2156dfae15964f88e0c4efc0fdb7b26262da0b7f9732b3ff43b999d3b9838b6b5777e0f2905e1ea7c234b2f07f63ae1ef1ae36cfccb119f0b2029bd6028b1303fbc5909"], 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r4, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x301400, 0x0) r2 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r2) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf250500000008001700", @ANYRES32=r2, @ANYBLOB="06001d008800000006001b004e230000080011000100000006000300ff0300000500210001000000050014000200000006001a004e240000f1636df2156dfae15964f88e0c4efc0fdb7b26262da0b7f9732b3ff43b999d3b9838b6b5777e0f2905e1ea7c234b2f07f63ae1ef1ae36cfccb119f0b2029bd6028b1303fbc5909"], 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x301400, 0x0) r2 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r2) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf250500000008001700", @ANYRES32=r2, @ANYBLOB="06001d008800000006001b004e230000080011000100000006000300ff0300000500210001000000050014000200000006001a004e240000f1636df2156dfae15964f88e0c4efc0fdb7b26262da0b7f9732b3ff43b999d3b9838b6b5777e0f2905e1ea7c234b2f07f63ae1ef1ae36cfccb119f0b2029bd6028b1303fbc5909"], 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x301400, 0x0) r2 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r2) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf250500000008001700", @ANYRES32=r2, @ANYBLOB="06001d008800000006001b004e230000080011000100000006000300ff0300000500210001000000050014000200000006001a004e240000f1636df2156dfae15964f88e0c4efc0fdb7b26262da0b7f9732b3ff43b999d3b9838b6b5777e0f2905e1ea7c234b2f07f63ae1ef1ae36cfccb119f0b2029bd6028b1303fbc5909"], 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x301400, 0x0) r2 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r2) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf250500000008001700", @ANYRES32=r2, @ANYBLOB="06001d008800000006001b004e230000080011000100000006000300ff0300000500210001000000050014000200000006001a004e240000f1636df2156dfae15964f88e0c4efc0fdb7b26262da0b7f9732b3ff43b999d3b9838b6b5777e0f2905e1ea7c234b2f07f63ae1ef1ae36cfccb119f0b2029bd6028b1303fbc5909"], 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:28 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={0x0}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x301400, 0x0) r2 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r2) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf250500000008001700", @ANYRES32=r2, @ANYBLOB="06001d008800000006001b004e230000080011000100000006000300ff0300000500210001000000050014000200000006001a004e240000f1636df2156dfae15964f88e0c4efc0fdb7b26262da0b7f9732b3ff43b999d3b9838b6b5777e0f2905e1ea7c234b2f07f63ae1ef1ae36cfccb119f0b2029bd6028b1303fbc5909"], 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:28 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:28 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:28 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x301400, 0x0) r1 = socket(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:28 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={0x0}}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x301400, 0x0) socket(0x1a, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x301400, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:28 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:28 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:28 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={0x0}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:28 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:28 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={0x0}}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:28 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:28 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:28 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:29 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:29 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:29 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:29 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={0x0}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:29 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) r2 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x40044000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:29 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={0x0}}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, 0x0, 0x4004) 05:58:29 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x0, 0x0, 0x6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:29 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, 0x0, 0x4004) 05:58:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, 0x0, 0x4004) 05:58:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:29 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:29 executing program 1: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) 05:58:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:29 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x8000) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={0x0}, 0x1, 0x0, 0x0, 0x404c880}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:29 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) r1 = socket(0x0, 0x0, 0x6) socket(0x27, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x800, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:29 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8000) socket(0x0, 0x0, 0x6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x30) 05:58:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:29 executing program 1: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) 05:58:29 executing program 1: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) 05:58:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:29 executing program 1: pidfd_open(0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$char_usb(r0, &(0x7f0000000280)=""/4096, 0x1000) 05:58:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004) 05:58:29 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0xa8601) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0x87fff34) syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) socket(0x0, 0x6, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004085}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6a, 0x0, 0x81, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x4011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_